pagemachine/ai-tools

Repo bus factorcaution

One contributor made 22 of 23 recent commits, leaving maintenance heavily dependent on a single active contributor despite a second contributor being present.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, so users have no documented public process for reporting vulnerabilities or understanding response expectations.

Workflow auditcaution

Both workflows were analyzed successfully, but all 7 action references are unpinned and one workflow has top-level write permissions. A high-confidence template-injection finding is hygiene concern here because no dangerous trigger or untrusted checkout was reported.