bnomei/kirby-kart

Repo bus factorcaution

Two contributors were active, but the leading contributor made about 91% of the 22 recent commits. This concentration creates a meaningful continuity risk for a user-owned project.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

All three workflows were analyzed without detected injection or high-severity findings, and none grants top-level write access. However, all nine action references are unpinned, which weakens build reproducibility and supply-chain hygiene.