silarhi/cursor-pagination

Repo bus factorcaution

All 21 recent commits came from one contributor, creating a real continuity risk. Organization ownership partly compensates because maintenance can potentially be handed off, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance-hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less clear for consumers.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no injection, credential, or other reported findings, but all 5 action references are unpinned, weakening build reproducibility and supply-chain hygiene.