digital-marketing-framework/typo3-distributor-request

Repo bus factorcaution

All recent commits came from one contributor, so continuity depends heavily on a single person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository had 2 commits in the last 3 months from 1 active maintainer, showing recent activity but limited maintenance capacity.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations and handling procedures undocumented.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, but all 4 action references are unpinned and the high-confidence audit finding reports an unpinned container image. This is a workflow hygiene and reproducibility concern, not by itself a severe adoption blocker.