hofff/contao-recursive-download-folder

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. That is meaningful evidence of currently thin maintenance and raises abandonment risk, even though a recent registry release exists.

Security policycaution

The repository has no security policy. That is a transparency gap for reporting and handling vulnerabilities, though it is not by itself evidence of unsafe code.

Workflow auditcaution

All six workflow action references are unpinned, and the audit found a high-confidence condition that always evaluates to true. The workflow has no untrusted checkout or script-injection path, so this is a hygiene and review concern rather than a severe standalone risk.