popphp/pop-form

Repo bus factorcaution

All 13 recent commits came from one contributor, creating a real continuity risk; organization backing partly offsets the risk because maintenance can potentially be handed off.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tools were detected. This is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for consumers of this library.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, which weakens build reproducibility.