nexusphp/tachycardia

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit and one active maintainer were recorded in the last three months, indicating limited recent maintenance activity despite the recent release.

Security policycaution

The repository has no published security policy, leaving reporting and response expectations unclear for consumers.

Workflow auditcaution

Both workflows grant top-level write permissions, and the release workflow contains two high-confidence template-injection findings. No dangerous trigger or untrusted checkout was detected, so this is a meaningful hygiene concern rather than a standalone severe verdict.