bnomei/kirby-handlebars

Project backingcaution

The package and repository are owned by the same individual account, so the project has direct ownership but no organizational backing to broaden maintenance capacity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern, though recent package releases provide some compensating evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, making vulnerability-reporting expectations less clear for consumers.

Workflow auditcaution

All 10 analyzed action references are unpinned, and one high-confidence medium-severity finding uses an archived action. No dangerous triggers, untrusted checkouts, script injection, or top-level write permissions were found.