rapidwebltd/php-postcodes

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single active individual.

Repo commit activitycaution

Two commits were made in the last three months, indicating recent activity, though the volume is limited.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less clear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.