webmozart/assert

Repo bus factorcaution

One contributor made all three commits in the last three months, giving the recent work a single-contributor bus factor and increasing continuity risk.

Repo commit activitycaution

The repository received three commits in the last three months, but all were made by one active maintainer, so recent maintenance is present but limited.

Repo toolingcaution

Composer build tooling is used, but no security scanning tools are reported; the missing scanning is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution sinks, but all six action references are unpinned, weakening build reproducibility and supply-chain controls.