sympress/coding-standards

Repo bus factorcaution

One contributor made all five recent commits, leaving maintenance concentrated in a single person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Five commits were made in the last three months, showing recent work, although all activity came from one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The repository's security policy and workflow audit provide partial compensating evidence.

Workflow auditcaution

The single workflow was fully analyzed, has read-only permissions, no dangerous triggers or audit findings, and no failed files. Both action references are unpinned, which is a supply-chain hygiene gap.