vielhuber/simplemcp

Repo bus factorcaution

One contributor made all two recent commits, leaving maintenance dependent on a single individual with no demonstrated handoff capacity.

Repo commit activitycaution

Only two commits were recorded in the last three months, indicating limited recent development activity even though releases have been frequent.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving an avoidable supply-chain hygiene gap.

Security policycaution

The repository has no security policy, so there is no documented path for reporting or handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkout sinks, but both of its two action references are unpinned, weakening build reproducibility.