platformcommunity/flysystem-bunnycdn

Repo bus factorcaution

All four recent commits came from one contributor, concentrating short-term maintenance knowledge and creating a meaningful continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated dependency or code-security coverage unshown.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, injection findings, or write-scoped top-level tokens. However, all 4 action references are unpinned, a supply-chain hygiene weakness.