blankogmbh/kirby-git-commit-and-push-content

Registry deprecationcaution

Packagist marks the whole package as abandoned and names thathoff/kirby-git-content as its replacement. The linked repository is still active and the assessed release is current, so this is a serious caution rather than proof that the code is unfit.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention this package. That makes the package-to-repository relationship less transparent, even though the README describes the same Kirby Git Content plugin.

Security policycaution

The linked repository has no security policy. This reduces vulnerability-reporting transparency, although recent commits and a current release provide evidence that the project is maintained.

Workflow auditcaution

All 4 analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkout, script injection, or high-confidence dangerous finding, so this is a build-hygiene caution rather than a severe workflow risk.