magewirephp/magewire

Maintainerscaution

Only one registry account has publish access. The repository's recent activity shows three active contributors, which partly compensates for the narrow registry publishing base.

Project backingcaution

The repository owner is a user account rather than an organization, so the single registry maintainer and concentrated commit activity are not offset by visible organizational backing.

Repo bus factorcaution

The leading contributor made about 74% of recent commits, creating concentration risk, but two additional contributors were active during the same period.

Workflow auditcaution

All 10 workflows were analyzed, with no untrusted checkout or script-injection findings, but all 20 action references are unpinned and three workflows grant top-level write access. A high-confidence template-injection finding is also present, although it is not shown to coincide with the pull_request_target workflow.