ultimate-multisite/ai-agent

Repo bus factorcaution

One contributor made 100% of the 342 commits during the last three months. Organization ownership provides some ability to hand off maintenance, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded 342 commits in three months, demonstrating very active development, but all commits came from one active maintainer.

Repo package mentioncaution

The repository name does not match the package name, and the README does not mention the Packagist package. Although a monorepo or renamed project can explain this, the linkage is not clearly demonstrated by the provided evidence.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected in the repository. This is a transparency and preventive-hygiene gap, not evidence of a defect.

Workflow auditcaution

All 9 workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection; however, 32 of 36 action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.