cpsit/typo3-personio-jobs

Repo bus factorcaution

All recent commits come from one contributor, creating handoff risk. Organization ownership provides some maintenance capacity, but no second active contributor is shown.

Repo commit activitycaution

There were 15 commits in the last three months, but all were made by one active maintainer; this indicates activity with limited contributor depth.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and handling less transparent.

Version stabilitycaution

Version 0.7.1 is not a stable-major release, so API evolution remains more likely than for a 1.x package, although it is not a prerelease and recent releases show stability.

Workflow auditcaution

All four workflows were analyzed, all 25 action references are pinned, and no untrusted checkout or script-injection trigger was found. High-confidence template-injection findings in the release workflow remain a hygiene concern, while the low-confidence cache-poisoning finding is not independently decisive.