univeros/polaris

Dependency profilecaution

The package declares 13 runtime dependencies, including polaris/core, polaris/pdo, polaris/psr15, and several Univeros components, so adoption brings a broad runtime dependency chain.

Repo bus factorcaution

One account, tonydspaniard, made all 29 commits in the last 3 months, so maintenance depends entirely on one active contributor.

Repo toolingcaution

The repository uses Composer but reports no security scanning tools, leaving automated security checks unreported.

Security policycaution

The repository has no SECURITY.md file or other reported security policy, so the vulnerability reporting process is not documented.

Workflow auditcaution

The only workflow was fully analyzed with no reported audit findings, but all 4 action references are unpinned, so their revisions can change without a workflow update.