maniaba/codeigniter4-sse

Maintainerscaution

Only one account has registry publish access. This is consistent with the individual-owned project context, but it still leaves release publishing dependent on one person.

Repo bus factorcaution

All 46 recent commits came from one contributor, leaving maintenance highly dependent on a single person; the repository owner is an individual rather than an organization.

Security policycaution

The repository has no security policy file, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

v1.0.0-rc3 is a prerelease, and every recent release is a prerelease, so API changes remain likely despite the stable major version.

Workflow auditcaution

All nine workflows were analyzed, use read-only permissions, and have no reported high- or medium-severity findings. However, all 35 action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.