roadiz/nodetype-contracts

Repo bus factorcaution

All two recent commits came from one contributor, creating a real continuity risk; organization backing provides some ability to hand maintenance off, but no second recent contributor is shown.

Repo commit activitycaution

Two commits were made in the last three months, indicating recent activity, although only one active maintainer contributed them.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tools were detected; for a small contracts library this is a modest hygiene gap rather than a severe risk.

Security policycaution

No repository security policy was found, reducing transparency for reporting vulnerabilities, though this small interface-only package has limited apparent attack surface.

Token permissionscaution

The only workflow lacks top-level token permissions, so its automation permissions are not explicitly constrained in the repository configuration.