symfonycasts/tailwind-bundle

Repo bus factorcaution

Recent work is concentrated in one contributor, with 90% of commits from the top contributor. A second contributor remains active and the repository is organization-owned, which provides some handoff capacity but does not eliminate concentration risk.

Repo issue activitycaution

There was one new pull request in the last month, but no issues or pull requests were closed during that period. This is a minor maintenance-process caveat, not evidence of abandonment given the recent commits and releases.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a transparency and assurance gap, though it is not by itself evidence that the release is unsafe.

Token permissionscaution

The only workflow lacks a top-level token permissions declaration. No write permissions were detected, but explicitly declaring least-privilege permissions would provide stronger workflow transparency.