bnomei/kirby3-redirects

Maintainerscaution

Only one registry account has publish access. The project is user-owned rather than organization-backed, so this indicates a thin publishing and continuity base.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although a recent release exists, the lack of observed commit activity is a maintenance concern.

Repo toolingcaution

The repository uses Composer for its build tooling, but no security scanning tools were detected. Composer is appropriate; the missing scanning coverage is a modest transparency gap alongside the workflow concerns.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is not evidence that the package is unsafe.

Workflow auditcaution

All 10 analyzed action references are unpinned, and one high-confidence medium-severity finding identifies an archived action. The workflows were fully analyzed and have no untrusted checkouts or script injections, which limits the concern to workflow hygiene.