mjaschen/phpgeo

Project backingcaution

The repository is owned by an individual user rather than an organization, so the concentrated recent contribution base is not offset by visible organizational handoff capacity.

Repo bus factorcaution

All three recent commits came from one contributor, creating a meaningful continuity risk despite the project's long history and recent releases.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without untrusted checkouts or script injection, and one scopes permissions at job level. However, all 10 action references are unpinned, and a low-confidence cache-poisoning finding is a workflow hygiene concern.