friendsoftypo3/kickstarter

Repo bus factorcaution

One contributor made 12 of 13 recent commits, or 92%, while a second contributor made one. The organization backing partly compensates for this concentration, but the dominant individual still creates a real continuity risk.

Security policycaution

No security policy is present in the repository. This is a transparency and vulnerability-reporting gap, though it is moderated by the presence of Dependabot scanning.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings, no untrusted checkout or script-injection sinks, and no top-level write permissions. However, two of three action references are unpinned, leaving avoidable build-integrity risk.