phpro/grumphp-shim

Repo bus factorcaution

All two recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

The repository had two commits in the last three months, which confirms some activity but indicates a modest recent maintenance pace.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting guidance undocumented; this is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous sinks or audit findings, but both of its two action references are unpinned, weakening build reproducibility.