simonschaufi/lock-element

Repo bus factorcaution

One contributor made all three recent commits, leaving maintenance highly concentrated and increasing continuity risk for a user-owned project.

Repo commit activitycaution

There were three commits in the last three months, showing recent activity, but all came from one active maintainer.

Repo toolingcaution

The repository uses Composer and Make tooling, but no security scanning tool was detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All eight action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow; the pull_request_target trigger has no untrusted checkout or script-injection sink.