sashalenz/delivery-auto-api

Repo bus factorcaution

One contributor made all commits during the last three months, leaving maintenance concentrated in a single person and increasing continuity risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is thin activity for a package that released recently and lowers confidence in ongoing maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, which weakens build reproducibility.