xp-forge/websockets

Repo bus factorcaution

One contributor made all commits in the last three months. Organization ownership provides some handoff capacity, but no second active contributor is shown to offset the concentration.

Repo commit activitycaution

Only one commit was recorded in the last three months, showing limited recent development activity despite the recent push and current release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which weakens build reproducibility.