pvtl/csv-importer

Repo bus factorcaution

All recorded recent commits come from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months, leaving limited evidence of sustained maintenance beyond the recent release burst.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security-maintenance coverage limited.

Security policycaution

The repository has no security policy, which reduces transparency about how vulnerability reports are handled.

Workflow auditcaution

The only workflow uses top-level write permissions and its single action reference is unpinned, both mild reproducibility and privilege concerns. The audit found no injection, untrusted-checkout, or high-confidence security findings.