mralaminahamed/ai-provider-for-opencode-zen

Project backingcaution

The repository is owned by a user account rather than an organization, which provides no organizational backing to compensate for the concentrated contributor base.

Release historycaution

This is a young package, released once 144 days ago, so its long-term maintenance record is still limited. Recent repository activity provides partial compensation but not a mature release history.

Repo bus factorcaution

All 38 recent commits came from one contributor, leaving maintenance highly concentrated. The repository owner is an individual, so there is no shown organizational handoff capacity to offset this.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

All 27 analyzed action references are unpinned, and one deployment workflow has a high-confidence template-injection finding; the low-confidence cache findings are hygiene concerns. No untrusted checkout or script-injection trigger was detected, so this is caution rather than a severe workflow risk.