ttbooking/ticket-allocator

Release historycaution

This is the package's only registry release, published over three years ago, with no releases in the last 12 months. Recent repository commits provide some compensation, but registry maturity remains limited.

Repo bus factorcaution

All 25 recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some ability to hand maintenance to another person, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a hygiene and assurance gap rather than evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and maintenance expectations. This is a moderate documentation gap, not a standalone dependency blocker.

Workflow auditcaution

Both workflows were fully analyzed with no detected high-confidence findings, and both scope permissions at job level. However, all six action references are unpinned, leaving the build exposed to unreviewed action changes.