phpstreamserver/scheduler

Dangerous workflowscaution

One workflow uses pull_request_target, which can be security-sensitive even though no untrusted checkout or script injection was detected. This warrants review rather than indicating a severe issue on its own.

Dependency profilecaution

Seven runtime dependencies, including platform extensions and the event-loop/runtime stack, create a meaningful dependency surface for a scheduler library but are proportionate to its functionality.

Package scaffoldingcaution

The package includes a README, but neither the artifact nor repository contains tests or a changelog. For a runtime scheduler library, the absence of repository tests is a genuine maintenance and regression-risk gap.

Repo bus factorcaution

All 38 recent commits came from one contributor, creating a clear continuity and bus-factor concern. The organization-owned repository provides some capacity for handoff, but no second active contributor is evidenced.

Repo issue activitycaution

There were no new or closed issues and no pull requests in the last month. This is ambiguous because it may reflect a quiet project, but it provides little evidence of broader maintenance participation.