type-lang/reader

Repo bus factorcaution

One contributor made all 7 commits in the last 3 months, creating a meaningful single-maintainer continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported, leaving security hygiene less well supported.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response.

Version stabilitycaution

Version 2.0.0-beta2 is a prerelease, and half of recent releases are prereleases, so compatibility may still change despite the package having a stable major line.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. All 3 action references are unpinned, which is a supply-chain hygiene gap, while the absence of a top-level permissions block is acceptable on its own.