os2forms/os2forms_organisation

Repo bus factorcaution

One contributor made all four commits in the last three months, creating a real continuity risk. Organization backing provides some ability to transfer maintenance, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and assurance gap rather than evidence that the release is unsafe.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Token permissionscaution

The only workflow lacks top-level token permissions, so its GitHub Actions permissions are less explicit than ideal. No top-level write permissions were detected, limiting the concern.