samuelreichor/craft-llmify

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.

Repo bus factorcaution

One contributor made all 62 commits in the last three months, leaving the project highly dependent on a single maintainer and increasing continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and preventive-maintenance gap, not evidence of a defect.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings, and permissions are scoped in two workflows. However, all six action references are unpinned, weakening build reproducibility and supply-chain protection.