ivoba/silverstripe-simple-pdf-preview

Repo bus factorcaution

All recent commits came from one contributor, giving the project a complete short-term bus-factor concentration. The matching repository and package owner provide continuity but do not remove the succession risk.

Repo commit activitycaution

The repository had 1 commit in the last 3 months from 1 active maintainer. Recent activity exists, but the low volume limits evidence of sustained maintenance capacity.

Security policycaution

The repository has no security policy. For a small extension this is a transparency gap rather than a severe dependency risk, but it leaves vulnerability-reporting expectations unclear.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted triggers, but both action references are unpinned. That creates a modest build reproducibility and supply-chain hygiene concern.