xpaw/php-source-query-class

Project backingcaution

The registry and repository are owned by the same individual, so the package has coherent ownership but no organization-level maintenance backing.

Repo bus factorcaution

One contributor made 22 of 24 recent commits, so maintenance is concentrated despite a second active contributor. This is a real continuity concern for an individually owned project.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, has no untrusted checkout or script-injection findings, and has no audit findings. Both action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.