okapi/aop

Release historycaution

The package has 20 releases over about 3 years, but none in the last 12 months; this is a meaningful maintenance slowdown, partly offset by recent repository activity.

Repo bus factorcaution

One contributor made all eight commits in the last three months, concentrating operational knowledge and creating a real continuity risk; organization backing provides some handoff capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving the project with limited visible automated security coverage.

Security policycaution

The repository has no published security policy, reducing clarity about vulnerability reporting and response.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no dangerous triggers, untrusted checkouts, script injection, or other findings. However, all nine action references are unpinned, which weakens build reproducibility and supply-chain hygiene.