stillat/proteus

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single active developer. Organization ownership provides some handoff capacity but does not remove the concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a hygiene gap rather than evidence of abandonment.

Workflow auditcaution

The only workflow was fully analyzed with no reported audit findings and no untrusted checkouts or injection sinks. However, both action references are unpinned, which weakens build reproducibility.