ssch/typo3-rector

Repo bus factorcaution

One contributor made about 79% of recent commits, creating concentration risk; two additional contributors remain active, which partly offsets but does not remove the single-contributor dependency.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though active maintenance and Dependabot provide some compensating security practice.

Token permissionscaution

All 4 workflows lack top-level token-permission declarations, leaving permissions less explicit than recommended; no workflow was observed with top-level write permissions.