dachcom-digital/dynamic-search

Dangerous workflowscaution

One of four workflows uses pull_request_target, while no untrusted checkout or script-injection patterns were detected; the isolated elevated workflow is a manageable workflow risk rather than a severe finding.

Repo bus factorcaution

All three-month commit activity comes from one contributor, giving a complete concentration of recent work; organization backing provides some handoff capacity but does not remove the current maintenance concern.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer, which indicates thin recent maintenance and raises abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a security-process gap for the repository.

Security policycaution

The repository has no SECURITY.md or other declared security policy, reducing transparency about vulnerability reporting and response.