novosga/monitor-bundle

Repo bus factorcaution

All two recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing recent maintenance, but the activity level is modest for a package with runtime dependencies.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. This weakens the documented process for reporting and handling vulnerabilities, though it does not by itself indicate abandonment.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, which weakens build reproducibility.