voltcms/useraccess

Repo bus factorcaution

One contributor made about 91% of the 23 recent commits, creating a thin practical maintainer base; the organization-owned repository partly reduces handoff risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a maintenance and supply-chain hygiene gap.

Security policycaution

The repository has no security policy, so users lack a documented route for reporting vulnerabilities in a package handling authentication and access management.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings; however, all 5 action references are unpinned, reducing build reproducibility and update integrity.