remi/xpass

Repo bus factorcaution

All two recent commits came from one contributor, so maintenance continuity depends heavily on a single person.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tool was detected; this is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow is fully analyzed with no untrusted checkouts or script injection, and jobs scope permissions, but both findings concern high-severity unpinned images at low confidence; this warrants a small hygiene deduction.