ceibacore/ceiba-cms

Release historycaution

This package is brand new, with only two releases published within hours and no longer-term release pattern to demonstrate reliability.

Repo bus factorcaution

All 17 recent commits came from one contributor, leaving maintenance highly concentrated. Organization backing provides some continuity, but no second active contributor is shown.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present, leaving automated detection coverage limited.

Security policycaution

The repository has no published security policy, so there is no documented process for reporting or handling security issues.

Workflow auditcaution

The single workflow was fully analyzed without dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility and update control.