jpmschuler/tvplus-contentslide

Maintainerscaution

Only one registry account has publish access, which limits publishing redundancy. The substantial release history partly compensates, but it still leaves a thin maintainer base.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although releases remain frequent, the lack of recent commit activity raises a maintenance concern.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it does not by itself indicate abandonment.

Workflow auditcaution

All 9 analyzed action references are unpinned, which weakens build reproducibility and update control. The workflow has no untrusted checkout, script injection, dangerous trigger, or top-level write-permission finding, which limits the risk.