nowo-tech/code-review-guardian

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. That is a major adoption and maintenance warning even though the repository remains active.

Workflow auditdanger

All six workflows were analyzed, but the audit found a high-confidence template-injection issue in a workflow that also performs an untrusted checkout, creating a meaningful workflow supply-chain risk. All 21 action references are unpinned, adding reproducibility and tampering exposure.

Repo bus factorcaution

One contributor made all 15 commits in the last three months, leaving no demonstrated handoff capacity. Organization backing helps somewhat, but the observed maintenance base remains fragile.