xoops/xmf

Repo bus factorcaution

All five commits in the last three months came from one contributor, creating a real continuity risk. The organization-owned project provides some ability to hand maintenance off, but no second recent contributor is shown.

Repo commit activitycaution

The repository recorded five commits in the last three months, showing current activity, but the volume is modest and concentrated in one active maintainer.

Token permissionscaution

All three workflows lack top-level token permissions declarations, which leaves their permissions less explicit than ideal. No workflow declares top-level write access, limiting the practical concern.