dedoc/scramble

Repo bus factorcaution

One contributor made about 84% of the last three months' commits. The 11 contributors and organization-owned project partly compensate, but responsibility remains concentrated.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three workflows were analyzed with no dangerous audit findings or untrusted checkouts. However, five of eight action references are unpinned and one workflow grants top-level write access, creating moderate hygiene risk.