xchert/encapsulation

Workflow auditdanger

Both workflows were analyzed and found two high-confidence github-app findings where an app token inherits blanket installation permissions; all 9 action references are unpinned, and one workflow grants top-level write access. These create meaningful release-workflow supply-chain exposure.

Repo bus factorcaution

One contributor made 90% of the 10 recent commits, creating concentration risk; the second active contributor and organization backing provide partial compensation.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this modestly limits external validation but does not establish an adoption risk by itself.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving security automation less mature.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response.