joomla/preload

Release historycaution

The package has existed since June 2020 and has eight releases, but only one release in the last 12 months and a median interval of about 370 days indicate a deliberately slow cadence.

Repo bus factorcaution

All recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months, which shows recent activity but limited current maintenance depth.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency gap rather than evidence of an unsafe release.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted checkout and script-injection paths. Its one action reference is unpinned, a minor reproducibility concern.