friendsoftypo3/headless

Repo bus factorcaution

One contributor made all commits in the last three months, giving the recent activity a 100% concentration; organization backing provides some handoff capacity but does not remove the near-term concentration risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, and only one maintainer was active; this is a meaningful sign of recently thin maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting guidance less transparent for consumers of this integration package.

Version stabilitycaution

v5.0.0-rc2 is a prerelease, so its API and behavior may still change; the recent prerelease share is only 10%, which partly limits the concern.

Workflow auditcaution

All three workflows were analyzed without high-confidence findings or untrusted checkout and script-injection patterns. However, all 13 action references are unpinned, which weakens build reproducibility; the absence of top-level permissions is not a concern by itself.