sinemacula/http-primitives-php

Repo bus factorcaution

One contributor made all seven recent commits, creating a genuine continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Seven commits were made in the last three months, showing recent activity. All were from one active maintainer, so the activity is positive but concentrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For this small library that is a modest process gap rather than a severe risk.

Workflow auditcaution

All three workflows were analyzed without failures, but all eight action references are unpinned, two workflows grant top-level write permissions, and a high-confidence medium-severity secrets-inherit finding affects the release workflow. These are meaningful workflow hygiene and credential-scope weaknesses, though no untrusted checkout or script injection was found.