upon/mlang

Repo bus factorcaution

One contributor made all three commits in the last three months, leaving maintenance highly concentrated in a single person.

Repo commit activitycaution

Only three commits were made in the last three months, so maintenance is active but relatively light.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, making the process for reporting and handling vulnerabilities unclear.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, injection findings, or severity-rated issues, but both action references are unpinned, weakening build reproducibility.