ndx/statamic-bard-color-picker

Repo bus factorcaution

All one recent commit came from a single contributor. Organization backing helps provide handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest assurance gap rather than evidence of unsafe behavior.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, and permissions are scoped or read-only. However, all 13 action references are unpinned, which weakens build reproducibility and supply-chain assurance.