pecl/solr

Repo bus factorcaution

All 12 recent commits came from one contributor, creating a real continuity risk; organizational project backing partly compensates because maintenance can be handed off.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected, leaving a modest transparency and vulnerability-detection gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

Both workflows were analyzed without high- or medium-confidence findings and have no untrusted checkouts or script injection, but all 7 action references are unpinned, reducing build reproducibility and supply-chain protection.