madebybramble/craft-bramble-search

Repo bus factorcaution

All 9 recent commits came from one contributor, leaving maintenance highly dependent on a single individual even though the repository is organization-owned.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a notable maintenance and security-hygiene gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings and scopes permissions at job level, but both action references are unpinned, reducing build reproducibility and supply-chain protection.