technicpack/solder

Repo bus factorcaution

All 32 recent commits came from one contributor, creating a real continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving automated security coverage unclear.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented for an API application.

Workflow auditcaution

The audit found no dangerous sinks or audit findings, but 10 of 11 action references are unpinned and three of four workflows grant top-level write permissions, creating moderate reproducibility and token-scope concerns.