johannschopplich/kirby-tools-licensing

Repo bus factorcaution

All 43 recent commits came from one contributor, creating a genuine continuity risk despite the active commit rate.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link is less transparent and may represent a related backend rather than an exact package repository.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The only workflow grants top-level write permissions and uses 3 of 3 actions without pinning. The reported cache-poisoning finding has low confidence, so it is hygiene rather than a severe risk.