webpatser/fledge-framework

Dangerous workflowscaution

All 12 workflows were analyzed without untrusted checkouts or script injection, but one pull_request_target workflow warrants caution because that trigger can expose privileged CI context to pull requests.

Dependency profilecaution

The framework declares 48 runtime dependencies, a broad dependency surface that increases upgrade and transitive-maintenance exposure, although that size is plausible for a Laravel framework replacement.

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not visibly compensated by organizational handoff capacity.

Repo bus factorcaution

One contributor made all 37 commits in the last three months, leaving no demonstrated contributor redundancy and creating a meaningful continuity risk.

Repo commit activitycaution

The repository recorded 37 commits in the last three months, demonstrating active work, but all activity came from one maintainer.