stefano/stefano-tree

Repo bus factorcaution

Two contributors were active in the last three months, but the top contributor made 25 of 26 commits, or about 96%. The second contributor provides limited redundancy, so maintenance remains concentrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a modest repository hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For a maintained library this reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-code sinks, but all three action references are unpinned. That leaves avoidable build reproducibility and action-substitution exposure.