pantheon-se/pantheon_autopilot_demo

Repo bus factorcaution

All 244 commits in the last 3 months came from one contributor, creating a real continuity risk; organization ownership offers some ability to hand maintenance off but no second active contributor is shown.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. For a small demo module this is a modest transparency gap rather than a severe adoption blocker.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though the package is a small demonstration module rather than a broad security-sensitive library.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both of its two action references are unpinned, leaving the build exposed to moving action code.