doublesecretagency/craft-cp

Licensecaution

No declared license, license file, or repository license file was detected. That leaves the legal terms for using this dependency unclear.

Repo bus factorcaution

All six recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some ability to hand maintenance off, but no second active contributor is shown.

Security policycaution

The repository has no published security policy. This is a transparency and reporting gap, though it is not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Its one action is unpinned, which is a modest reproducibility and supply-chain hygiene concern.