dnadesign/silverstripe-elemental

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, with one active maintainer; this is weaker current maintenance than the release history suggests.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a transparency and maintenance-hygiene gap.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

All 7 analyzed action references are unpinned, which weakens build reproducibility and action supply-chain hygiene. The audit found no untrusted checkout, script injection, excessive top-level write permissions, or other reported findings.