webmasterskaya/production-calendar

Repo bus factorcaution

One contributor made all six recent commits, giving the project a very concentrated bus factor. Organization ownership provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

The repository recorded six commits in the last three months, showing recent work, but only one maintainer was active during that period. That limits maintenance resilience.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a maintained dependency, that is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 14 analyzed action references are unpinned, and two of three workflows grant top-level write permissions. The audit found no untrusted checkout or script-injection sink, so this is workflow hygiene caution rather than a severe risk.