johannschopplich/kirby-serp-preview

Project backingcaution

The repository is owned by an individual rather than an organization, so the single-contributor concentration is not visibly offset by organizational maintenance capacity.

Repo bus factorcaution

One contributor made all 27 recent commits, creating a meaningful continuity risk if that maintainer becomes unavailable.

Repo toolingcaution

The project uses a build tool, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and handling expectations are not documented.

Workflow auditcaution

The only workflow gives top-level write permissions and all 3 action references are unpinned. The audit also reported a low-confidence cache-poisoning pattern; these are release-hygiene cautions, not evidence of a severe workflow compromise.