orangehill/iseed

Repo bus factorcaution

One contributor made all commits in the last three months, creating concentrated maintenance capacity. Organization backing provides some handoff potential but does not remove the current concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is thin activity, but the release history shows 12 releases in the last year and a recent release, partly compensating for the quiet commit window.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and detection gap.

Security policycaution

The repository has no security policy, so vulnerability-reporting expectations are not documented; this is a process gap rather than evidence of unsafe code.

Workflow auditcaution

The workflow audit completed fully with no untrusted checkouts, script injection, or high-confidence findings. However, all three referenced actions are unpinned, which weakens build reproducibility.