whilesmart/eloquent-organizations

Repo bus factorcaution

One contributor made all six commits in the past three months, creating a real continuity risk. Organization ownership provides some handoff capacity but does not eliminate the concentration.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.

Security policycaution

The repository has no security policy, so users lack documented guidance for reporting vulnerabilities or understanding the project's security process.

Workflow auditcaution

All five analyzed action references are unpinned, two release workflows grant top-level write permissions, and a high-confidence audit found an ad hoc package installation. No untrusted checkout or script-injection path was detected, limiting this to a hygiene concern.