myclabs/deep-copy

Repo bus factorcaution

All seven recent commits came from one contributor, creating concentration risk. The organization-owned repository provides some handoff capacity, but no second recent contributor is shown.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. The missing scanning reduces assurance modestly without indicating abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a widely used library.

Token permissionscaution

The CI workflow does not declare top-level token permissions. Although no write permissions were detected, explicitly limiting the token would provide stronger workflow hygiene.