vaened/php-delta-orchestrator

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.

Repo bus factorcaution

All 35 recent commits came from one contributor, leaving maintenance highly concentrated and creating a meaningful continuity risk.

Security policycaution

The repository has no security policy. This does not show a security defect, but it reduces transparency about how users should report and receive fixes for vulnerabilities.

Version stabilitycaution

v0.8.1 is not a stable major release, so its API may still change. It is not marked as a prerelease, which partly offsets the concern.

Workflow auditcaution

The only workflow was fully analyzed with no injection or high-severity findings, but both of its two action references are unpinned. That leaves the build exposed to changing action revisions.