open-telemetry/detector-container

Repo bus factorcaution

All recent commits came from one contributor, creating a concentrated maintenance dependency. Organizational ownership provides some continuity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded one commit in the last 3 months from one active maintainer. Recent activity exists, but the volume is thin for ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanner modestly reduces assurance while the package still has repository tests.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented. This is a transparency gap, not evidence that the package is unsafe.