mediawiki/semantic-forms-select

Repo bus factorcaution

All recent commits came from one contributor, giving a 100% top-contributor share. Organization backing partly reduces handoff risk, but the observed recent activity is still concentrated.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, with 1 active maintainer. That is thin recent development activity and raises maintenance-risk concerns despite the recent release.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the release is unsafe.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-confidence audit findings, but both action references are unpinned. Unpinned references weaken build reproducibility and supply-chain hygiene.