phpstreamserver/core

Dangerous workflowscaution

The repository has one pull_request_target workflow, which warrants review because that trigger can expose elevated workflow context, although no untrusted checkout or script-injection pattern was detected.

Package scaffoldingcaution

A README is present, but neither the artifact nor repository contains tests or a changelog, leaving useful maintenance and release-quality evidence absent for this server component.

Repo bus factorcaution

All 71 recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some ability to hand maintenance off but does not eliminate the observed concentration.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no community adoption signal; this is a supporting concern rather than a standalone failure for a small package.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving security hygiene less demonstrated than the active development process.