phrity/config

Repo bus factorcaution

All recent commits came from one contributor, leaving maintenance dependent on a single active person.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, so ongoing maintenance activity is limited despite the recent release.

Repo toolingcaution

The repository uses Composer and Make, but no security scanning tooling was detected. That is a maintenance and transparency gap, though not evidence of a direct defect.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings. However, all 12 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.