cgoit/contao-persons-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a maintenance warning. However, the package had a current release and 4 merged pull requests in the last month, partly compensating for the quiet commit window.

Security policycaution

No security policy is present in the repository. This is a transparency and response-process gap, though it is not evidence that the package is unsafe.

Workflow auditcaution

Both workflows were analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection paths. However, all 5 action references are unpinned, and one workflow grants top-level write permissions, creating avoidable workflow hygiene risk.