jweiland/statictagcloud

Repo bus factorcaution

One contributor made 100% of the commits in the last three months. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, by one active maintainer. Releases continue, but recent implementation activity is limited.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a maintained extension, this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This does not show a vulnerability, but it leaves vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or dangerous untrusted triggers, but its one action reference is unpinned. That weakens reproducibility even though no risky sink was found.