rhinox/input-data

Repo bus factorcaution

One contributor made all 7 commits in the last three months. Organization ownership provides some handoff capacity, but the observed maintenance activity is still concentrated in one person.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the active release history and organization backing partially offset the concern.

Workflow auditcaution

The workflow audit completed cleanly with no injection or high-confidence findings, but all 7 action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions modestly weaken build reproducibility.