os2web/os2web_datalookup

Repo bus factorcaution

All two recent commits came from one contributor, giving the repository a 100% top-contributor share. Organization backing helps provide continuity, but no second active contributor is shown.

Repo commit activitycaution

The repository received two commits in the last 3 months. That is evidence of ongoing work, although the volume is low.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning coverage is a maintenance and supply-chain hygiene gap.

Security policycaution

The repository has no security policy. This makes vulnerability reporting and response expectations less transparent for consumers.

Workflow auditcaution

The single analyzed workflow is complete but all 7 action references are unpinned, weakening build reproducibility. The high-confidence template-injection finding is a workflow hygiene concern, while the absence of untrusted checkouts and script injection limits its severity.