struzik-vladislav/epp-client

Repo bus factorcaution

All recent repository commits came from one contributor, leaving maintenance dependent on a single active person. The project is user-owned rather than organization-backed, so there is no provided backing signal to offset that concentration.

Repo commit activitycaution

There was one commit in the last three months, showing some recent activity but limited momentum. The recent release history partly offsets the low short-term commit volume.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a maintained library, this is a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though it does not by itself indicate abandonment.

Workflow auditcaution

All three analyzed action references are unpinned, which weakens build reproducibility; however, the workflow uses read-only permissions, has no untrusted checkout or script-injection findings, and the audit completed fully.