zofe/demo-module

Repo bus factorcaution

All 18 recent commits came from one contributor, leaving maintenance highly concentrated and creating a meaningful continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving security hygiene less visible than it could be.

Security policycaution

The repository has no security policy, so users lack a documented route for reporting vulnerabilities and understanding the project's security process.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its action references are unpinned, weakening build reproducibility and supply-chain controls.