enjoyscms/core

Dependency profilecaution

Twenty-seven runtime dependencies is a substantial dependency surface for a core library, adding maintenance exposure, but the profile is consistent with its broad framework functionality.

Repo commit activitycaution

No commits and no active maintainers were observed during the last three months. The recent repository push and active release history partly offset this, but the gap still raises maintenance-continuity concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving fewer automated checks for dependency or code risks.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The workflow audit completed successfully and found read-only permissions with no untrusted checkout or injection findings. However, both analyzed action references are unpinned, weakening build reproducibility and update integrity.