dynamic/silverstripe-elemental-testimonials

Repo bus factorcaution

All recent commit activity came from one contributor. The organization-owned repository provides some handoff capacity, but no second active contributor is shown for this period.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, showing light recent development despite a recent package release. That lowers confidence in the current maintenance pace.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance-process gap.

Security policycaution

The repository has no security policy. For a CMS integration library this makes vulnerability reporting and response expectations less clear.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers or audit findings, but its single action reference is unpinned. That leaves a limited reproducibility and supply-chain hygiene gap.