codefog/contao-haste

Repo bus factorcaution

One contributor made 100% of the recent commits. Organization backing provides some handoff capacity, but no second contributor is shown as recently active.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, showing limited recent development despite the package's active release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities.

Workflow auditcaution

The workflow uses read-only permissions and has no reported audit findings, but all 3 analyzed action references are unpinned, reducing build reproducibility and supply-chain hygiene.