jorisnoo/craft-imageboss

Repo bus factorcaution

Two contributors are active, but the leading contributor made 80% of recent commits, leaving maintenance somewhat concentrated.

Security policycaution

The repository has no security policy, reducing the transparency of vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows grant top-level write permissions, one uses an unpinned action, and high-confidence bot-condition and template-injection findings were reported. No untrusted checkout or script-injection sink was found, so this is a hygiene concern rather than a severe standalone risk.