survos/jsonl-bundle

Dependency profilecaution

The package declares 11 runtime dependencies, including several Symfony components and required PHP extensions; this is a meaningful integration surface for a small bundle, though the dependencies fit its documented feature set.

Repo bus factorcaution

One contributor made all 3 commits in the last 3 months, concentrating current maintenance in a single person; organization ownership partly reduces handoff risk but does not remove it.

Repo commit activitycaution

Only 3 commits were recorded in the last 3 months, which is modest relative to the very frequent release history and leaves maintenance activity looking thin.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for consumers.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, but all 4 action references are unpinned, weakening build reproducibility and action supply-chain hygiene.