webfactory/object-routing

Repo bus factorcaution

All recent commits come from one contributor, creating concentration risk; the organization-owned repository provides some handoff capacity but does not eliminate the thin active-maintainer base.

Repo commit activitycaution

One commit was made in the last three months by one active maintainer, showing recent maintenance but a very low current activity level.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and detection gap.

Security policycaution

The repository has no security policy, so consumers have no documented vulnerability-reporting process.

Token permissionscaution

Neither workflow declares top-level token permissions. No write permissions were observed, but explicit least-privilege declarations would provide stronger CI safety evidence.