pushinbr/pam-native-maps

Repo bus factorcaution

All 13 recent commits came from one contributor, leaving maintenance highly concentrated; organization ownership provides some handoff capacity but does not remove the current single-contributor risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users lack a documented reporting and response path if dependency or integration problems are found.

Version stabilitycaution

Version 0.2.0 is not yet a stable major release, so its API and behavior may still change as the young project matures.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no dangerous triggers, untrusted checkouts, script injection, or other findings. However, all three referenced actions are unpinned, weakening build reproducibility.