orieg/judy-cache

Repo bus factorcaution

All 47 recent commits came from one contributor, leaving a concentrated maintenance dependency and limited continuity if that contributor becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and review gap.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Version stabilitycaution

Version 0.3.1 is not a stable major release, so compatibility expectations are lower, although it is not marked as a prerelease.

Workflow auditcaution

All four workflows grant top-level write permissions and all 29 action references are unpinned. The audit found no untrusted checkout or script-injection path, so this is workflow hygiene risk rather than a severe finding.