dachcom-digital/members

Dangerous workflowscaution

One of four workflows uses pull_request_target, which can increase CI supply-chain exposure if handled incorrectly; no untrusted checkouts or script-injection patterns were detected, limiting the concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. This is the clearest maintenance concern, although the recent push and release history provide some compensating evidence.

Repo issue activitycaution

There are only four open issues and two open pull requests, but no issues or pull requests were created or closed in the last month, indicating limited recent interaction.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For an authentication and access-control bundle, that is a meaningful repository hygiene gap.

Security policycaution

The repository has no security policy. For a package implementing authentication, registration, OAuth, and document restrictions, the lack of a documented vulnerability-reporting path lowers transparency.