spora-ai/spora-plugin-memories

Dependency profilecaution

Five runtime dependencies, including the host core and a paired frontend package, are reasonable for a plugin but create coupling to the surrounding Spora package ecosystem.

Repo bus factorcaution

One contributor made 100% of the 50 recent commits, creating a significant bus-factor concern; the organization-owned repository offers some potential continuity but does not demonstrate a second active contributor.

Repo commit activitycaution

Fifty commits in the last three months show strong recent activity, but all were produced by one active maintainer, limiting independent maintenance capacity.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and disclosure expectations undocumented.

Token permissionscaution

The only workflow lacks top-level permissions and uses job-level permissions only; although no top-level write permissions were detected, the permission posture is less explicit than ideal.