cu-boulder/ucb_default_content

Release historycaution

Only two releases exist, both published over four years ago, with no releases in the last 12 months. That thin and stale registry history raises maintenance and adoption risk despite later repository activity.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. Combined with the sparse release history, this suggests currently limited maintenance activity.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though it is less significant for a small Drupal content module than for security-sensitive software.

Version stabilitycaution

The latest version is still marked alpha, and all recent releases are prereleases. Consumers should expect less stability than from a mature stable release.

Workflow auditcaution

All five analyzed workflow references are unpinned, weakening build reproducibility, and a high-confidence medium-severity secrets-inherit finding shows one reusable workflow receives broader credentials than necessary. No untrusted checkouts or script injection were found, which limits the severity.