milpa/agent

Repo bus factorcaution

All 105 recent commits came from one contributor, creating a meaningful continuity risk; organization backing partly offsets the lack of contributor diversity.

Repo popularitycaution

The repository has no stars, forks, or watchers, so it has little external adoption evidence; this young package's strong release and commit activity compensates for that limited supporting signal.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected; the repository's separate security policy provides some compensating transparency.

Version stabilitycaution

Version 0.49.0 is not a prerelease, although the package remains below 1.0 and may still undergo breaking changes.

Workflow auditcaution

All four workflows were analyzed successfully with no injection or high-confidence audit findings. However, all seven action references are unpinned and three workflows grant top-level write permissions, creating avoidable maintenance and token-scope risk.