wemxo/filer-bundle

Repo bus factorcaution

All three recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is evidenced, so maintenance remains concentrated.

Repo commit activitycaution

The repository received three commits in the last three months from one active maintainer, showing recent work but only modest ongoing activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving less automated protection against dependency or code issues.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a package that manages stored files.

Workflow auditcaution

The only workflow was fully analyzed with no reported audit findings or unsafe untrusted triggers, but all three action references are unpinned, weakening build reproducibility.