verbb/tablemaker

Repo bus factorcaution

All 66 recent commits came from one contributor, giving the project a low recent contributor breadth. Organization ownership provides some continuity, but no second active contributor is shown to share current maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance-process gap, not evidence of a defect in the release.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout, injection, or audit findings. All 4 action references are unpinned, creating a supply-chain hygiene gap despite the otherwise restrictive workflow permissions.