drupal/coder

Project backingcaution

The repository is owned by an individual rather than an organization, so the observed quiet commit activity provides limited evidence of maintenance capacity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern even though the registry shows six releases in the last year.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest project-hygiene gap.

Security policycaution

No security policy was found in the linked repository, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, both actions are unpinned, which leaves their exact revisions mutable.