rampart/quality-checker

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not visibly supported by broader organizational backing.

Release historycaution

The package is only 1 day old, despite 7 releases in that period; this shows active initial work but provides no evidence of sustained maintenance or release stability.

Repo bus factorcaution

One contributor made all 92 commits in the last 3 months, leaving maintenance highly dependent on a single person.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tools were detected. The package itself includes security-oriented checks, which partly offsets this project-level gap.

Workflow auditcaution

Both workflows were fully analyzed with no reported audit findings or untrusted checkouts, and neither uses broad top-level write permissions. However, all 12 analyzed action references are unpinned, weakening build reproducibility and action-integrity protection.