johannschopplich/kirby-seo-audit

Repo bus factorcaution

One contributor made all 93 commits in the last 3 months, creating a genuine continuity risk. Organization backing provides some capacity to hand off maintenance, but no second active contributor is evidenced here.

Repo toolingcaution

Composer is used for builds, which supports a defined build process, but no security scanning tools were detected. The lack of scanning is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency gap, although the active repository and controlled workflow reduce its overall weight.

Token permissionscaution

The release workflow declares top-level write permissions. This expands the potential impact of a workflow compromise, though the separate workflow analysis found no dangerous trigger or checkout pattern.