componenta/templater-app

Repo bus factorcaution

One contributor made all 9 commits in the last 3 months, leaving maintenance dependent on a single person. Organization ownership provides some handoff capacity but does not remove the current concentration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. For this small package that is a transparency and process gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though it is a limited concern for a small, actively maintained package.

Workflow auditcaution

The workflow uses read-only permissions and the audit completed cleanly with no untrusted checkouts or script injection findings. All 3 of 3 action references are unpinned, leaving avoidable build-integrity risk.