topthink/think-throttle

Repo bus factorcaution

All recent commits came from one contributor, creating a concentrated bus factor; organization ownership provides some ability to hand maintenance off.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last 3 months, indicating thin recent development activity, although the package also had a release during that period.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a small repository hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities, though it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous findings, but both of its action references are unpinned, weakening build reproducibility.