digitalpulsebe/craft-database-translations

Repo bus factorcaution

All 3 recent commits came from one contributor, creating a genuine continuity risk. The organization-owned repository provides some compensating maintenance capacity, so this is caution rather than danger.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured; this is a transparency and process gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Token permissionscaution

The release workflow lacks top-level token permissions, which weakens least-privilege transparency even though no top-level write permissions were detected.