johannschopplich/kirby-live-preview

Repo bus factorcaution

All 20 commits in the last 3 months came from one contributor. Organization backing provides some handoff capacity, but current maintenance remains concentrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in automated security hygiene.

Security policycaution

The repository has no security policy, which reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single analyzed workflow gives top-level write permissions and all 3 action references are unpinned, both of which weaken release hygiene. The low-confidence cache-poisoning finding is hygiene evidence rather than a severe risk, with no untrusted checkout or script-injection paths detected.