pulsenote/pulsenote-php

Release historycaution

Seven releases in 42 days, with a median interval of about 3 days and a release as recently as the scan date, shows active publication. However, the short project age limits evidence of long-term maturity.

Repo bus factorcaution

All 18 recent commits came from one contributor, creating a genuine continuity risk. Organization ownership partially compensates because maintenance can potentially be handed off, but no second active contributor is shown.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak external-adoption evidence, but popularity is only supporting evidence and the project is very new.

Repo toolingcaution

Make and Composer build tooling are present, but no security-scanning tools were detected. The missing scanning is a hygiene gap, not by itself evidence that the package is unsafe.

Token permissionscaution

One workflow lacks top-level permissions and two workflows declare top-level write permissions, leaving room for least-privilege improvement. This is a workflow-hygiene concern, tempered by the absence of detected dangerous workflow patterns.