derhansen/form_crshield

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although a recent release partially offsets this, the lack of ongoing development lowers confidence in maintenance continuity.

Repo toolingcaution

The project uses Composer, but no security-scanning tooling was detected. That is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

No repository security policy was found. For an extension that processes form submissions, the missing reporting guidance is a real but limited transparency gap.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, and no workflow has top-level write permissions. However, all eight action references are unpinned, leaving build inputs less reproducible and increasing workflow supply-chain exposure.