aimeos/pagible

Repo bus factorcaution

All 322 recent commits came from one contributor, leaving limited visible handoff capacity and increasing continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear for adopters.

Version stabilitycaution

Version 0.13.1 is not a stable major release, so consumers may face compatibility changes despite the absence of prereleases.

Workflow auditcaution

The audit completed successfully, but all four action references are unpinned and high-confidence template-injection findings were reported in both workflows; no untrusted checkout or dangerous trigger was found to amplify them.