papi-ai/papi-core

Repo bus factorcaution

All 10 recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving continuity dependent on one person.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest gap in automated security hygiene.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Version stabilitycaution

Version v0.15.3 is not a stable major release, so compatibility may still change, although it is not marked as a prerelease.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, a reproducibility and action-tampering hygiene gap.