jasonmccreary/double

Repo bus factorcaution

Three contributors were active, but one person made about 93% of recent commits. Because the repository is user-owned rather than organization-owned, this concentration is a real continuity concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so it gives consumers no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

All three workflows were analyzed with no audit findings or untrusted checkouts, but all eight action references are unpinned and one workflow grants top-level write access, creating a workflow-hygiene caution.