yurunsoft/yurun-http

Repo bus factorcaution

Two contributors are active, but one accounts for six of seven recent commits, leaving maintenance somewhat concentrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, so vulnerability-reporting and response expectations are not documented.

Workflow auditcaution

All four workflows were analyzed without untrusted triggers, injection findings, or write permissions, but all eight action references are unpinned, reducing build reproducibility and update integrity.