xp-forge/frontend

Repo bus factorcaution

All recent commit activity comes from one contributor, leaving maintenance dependent on a single active developer; organization ownership provides some handoff capacity but does not remove the concentration.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, which is a thin maintenance signal despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, making vulnerability-reporting expectations less clear for consumers.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 referenced actions are unpinned, weakening build reproducibility.