markup-carve/carve-php-media-embed

Repo bus factorcaution

One contributor made all 11 commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Eleven commits in the last three months show recent work, but all activity came from one active maintainer, limiting resilience.

Repo toolingcaution

The repository uses Composer, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.

Version stabilitycaution

Version 0.1.5 is not a stable major release, so compatibility may still change despite the absence of prerelease versions.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, weakening build reproducibility.