mnb/mnb-secure-core

Project backingcaution

The repository is owned by an individual rather than an organization, so the one-person maintenance concentration is not offset by visible organizational backing.

Release historycaution

The package is 80 days old with only one release, so long-term maintenance and compatibility are not yet demonstrated.

Repo bus factorcaution

All 38 recent commits came from one contributor, leaving maintenance highly dependent on a single person.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected, leaving a transparency and maintenance gap for a security-focused library.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both action references are unpinned, reducing build reproducibility.