phpbb/pages

Repo bus factorcaution

One contributor made 100% of the recent commits, so maintenance depends heavily on a single person despite the organization-backed repository.

Repo commit activitycaution

The repository recorded 21 commits in the last 3 months, showing active work, but all were made by one active maintainer, creating concentration risk.

Repo toolingcaution

Composer and Phing provide build tooling, but no security-scanning tools are reported, leaving a modest transparency and defense gap.

Security policycaution

The repository has no published security policy, so reporting and handling expectations for vulnerabilities are not documented.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings or unsafe untrusted triggers, but both action references are unpinned and one workflow grants top-level write permissions; this is a workflow-hygiene caution, not a severe risk on its own.