portphp/csv

Repo bus factorcaution

All 9 recent commits came from one contributor, so maintenance is operationally concentrated despite the project's organization backing.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The workflow audit completed cleanly with read-only permissions and no high- or medium-severity findings, but all 3 referenced actions are unpinned, leaving avoidable build-reproducibility and action-integrity risk.