novosga/reports-bundle

Repo bus factorcaution

One contributor made all recent commits, creating a concentrated maintenance risk; organization ownership provides some ability to hand work off, but no second active contributor is shown.

Repo commit activitycaution

There were 3 commits in the last 3 months, showing current activity, but all activity came from only one maintainer.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented reporting or response process; this is a real but not severe project-hygiene gap.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but both referenced actions are unpinned, reducing build reproducibility and supply-chain hygiene.