middlebury/midd-frontend

Repo bus factorcaution

Three contributors are active, but one contributor made 25 of 27 recent commits, leaving maintenance capacity highly concentrated. Organization backing partly reduces handoff risk, but does not eliminate the concentration.

Repo issue activitycaution

The repository has active issues and pull requests, but five new issues and no issues closed in the last month indicate unresolved maintenance backlog.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are present, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all five action references are unpinned and one uses an archived action. These are workflow reproducibility and maintenance risks, not evidence of a severe failure.