php-flasher/flasher-notyf-symfony

Repo bus factorcaution

One contributor made all 3 commits in the last 3 months, concentrating recent maintenance. Organization ownership provides some handoff capacity, but the observed activity still leaves a thin active contributor base.

Repo commit activitycaution

The repository recorded 3 commits in the last 3 months, showing recent activity but at a modest pace. This is sufficient for a caution rather than an abandonment finding because release activity remains frequent.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence of unsafe code by itself.

Workflow auditcaution

The sole workflow uses pull_request_target and has one unpinned action, creating a hygiene concern. However, the audit found no untrusted checkout, script injection, excessive top-level write permissions, or other findings.