cpsit/typo3-handlebars

Repo bus factorcaution

All 50 recent commits came from one contributor, creating a clear concentration risk. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.

Version stabilitycaution

Version 1.0.0-alpha.13 is still a prerelease, and 60% of recent releases are prereleases. The stable major version context is reassuring, but consumers should expect API or behavior changes.

Workflow auditcaution

All three workflows were analyzed, all 23 action references are pinned, and no untrusted checkouts or script-injection sinks were found. High-confidence template-injection findings in the release workflow are a workflow hygiene concern; the low-confidence cache-poisoning finding is not independently weighty, and the absence of a top-level permissions block is acceptable here.