phpbb/boardannouncements

Repo bus factorcaution

One contributor made all 16 commits in the last three months, creating a real continuity risk. The organization-owned repository provides some handoff capacity, but no second contributor was active in the measured period.

Repo toolingcaution

Composer and Phing provide build tooling, but no security scanning tools were detected. This is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Token permissionscaution

One workflow lacks top-level permissions and another requests top-level write permissions. The workflows show no dangerous execution patterns, but the permissions posture is less constrained than ideal.