webfactory/slug-validation-bundle

Repo bus factorcaution

One contributor made all commits in the last 3 months. Organization backing provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, so recent maintenance is limited despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less clear for consumers.

Workflow auditcaution

All three workflows were analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, which weakens build reproducibility.