appswithlove/statamic-one-click-content-translation

Licensecaution

Neither the package nor the linked repository provides a declared license or license file, leaving developers without clear permission to use the code.

Repo bus factorcaution

All 11 recent commits came from one contributor, so maintenance capacity is concentrated despite the repository being owned by an organization.

Security policycaution

The repository has no published security policy, which is a transparency gap for reporting vulnerabilities, though it is not evidence of an active security issue.

Workflow auditcaution

Both workflows were analyzed with no audit findings or untrusted execution paths, but all 5 action references are unpinned and one workflow grants top-level write access. The write permission is not paired with an untrusted trigger, so this is workflow hygiene rather than a severe risk.