oxygensuite/oxygen-ergani

Repo bus factorcaution

All 4 commits in the last 3 months came from one contributor, giving the project a concentrated recent bus factor. Organization ownership provides some backing, but no second recently active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected in the repository. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Workflow auditcaution

All 3 workflows were analyzed with no high- or medium-confidence audit findings, and no untrusted checkout or script-injection paths were detected. However, all 8 action references are unpinned and one workflow grants top-level write permissions, creating moderate reproducibility and permissions hygiene concerns.