oliverde8/php-etl-bundle

Repo bus factorcaution

All 3 recent commits came from one contributor, so maintenance depends heavily on a single person despite the repository remaining active.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

The single workflow was fully audited and uses read-only permissions with no dangerous sinks or audit findings, but both action references are unpinned, weakening build reproducibility.