rimba/ldap

Release historycaution

The package is young at 55 days but has 17 releases, including releases within the last 12 months; this shows active delivery, though the short history limits maturity evidence.

Repo bus factorcaution

One contributor made all 18 commits in the last three months, leaving a thin active contributor base. Organization ownership provides some handoff capacity but does not remove the current concentration concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution sinks, but it grants top-level write permissions and both action references are unpinned. Those are workflow hygiene concerns, not severe risks on their own.