silpo-tech/openswoole-bundle

Repo bus factorcaution

All 3-month commit activity comes from one contributor. The organization-owned repository provides some handoff capacity, but no second active contributor is shown to offset the concentration.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, which is modest activity for a package with recent releases and suggests limited ongoing engineering capacity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings, and it scopes permissions at job level. However, all 11 action references are unpinned, which weakens build reproducibility and leaves a workflow hygiene concern.