omikron/oxid-factfinder

Repo bus factorcaution

All four recent commits came from one contributor. Organizational ownership provides some handoff capacity, but no second active contributor is shown to reduce the current concentration.

Repo commit activitycaution

The repository had four commits in the last 3 months, showing ongoing maintenance, but activity is relatively light for a production integration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving repository security hygiene less complete.

Security policycaution

The repository has no published security policy, so users are given no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, which is a workflow supply-chain hygiene gap.