socialdept/atp-signals

Repo bus factorcaution

Two contributors were active in the last 3 months, although one made 8 of 11 commits. The second active contributor partly compensates for the concentration, making this a minor concern rather than a severe bus-factor risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens automated assurance modestly while the repository's tests and ongoing commits provide some compensation.

Security policycaution

No repository security policy was found. This is a transparency gap for a package processing live network events, though it is not evidence of unsafe code by itself.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, or high-severity findings, and no workflow has top-level write permissions. However, all 4 action uses are unpinned, which weakens build reproducibility.