mralaminahamed/forminator-stubs

Repo bus factorcaution

All 20 recent commits came from one contributor, creating a meaningful continuity risk if that maintainer becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected; this is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented.

Workflow auditcaution

All three workflows were analyzed without audit findings or unsafe untrusted triggers, but all seven action references are unpinned and two workflows use top-level write permissions. These create workflow supply-chain and privilege-breadth concerns without evidence of an active exploit path.