webnazakazku/mango-tester-http-mocks

Repo bus factorcaution

All 9 recent commits came from one contributor, creating a concentrated maintenance dependency. Organization ownership partly compensates because maintenance can potentially be handed off, but the concentration remains a real limitation.

Repo toolingcaution

The project uses Make and Composer build tooling, which supports reproducible project operations. No security scanning tools are configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. For a small testing utility this is a hygiene gap rather than evidence of abandonment, but it reduces clarity for reporting vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings, and it has no broad top-level write permission. However, all 10 action references are unpinned, weakening build reproducibility and update control.