mediawiki/semantic-glossary

Repo bus factorcaution

All recent commits came from one contributor, giving the project a fragile short-term contributor base. Organization ownership provides some ability to hand off maintenance, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, by one active maintainer. That is a meaningful sign of limited recent maintenance, although the recent release and repository push provide some counterevidence.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. The missing scanning is a transparency and maintenance gap, though it is not by itself evidence that the package is unsafe.

Token permissionscaution

The only workflow does not declare top-level token permissions, so its effective permissions are less explicit than ideal. It does not request top-level write access.