kaliop/content-decorator-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, although the recent release history and July push provide some compensating evidence.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings or untrusted checkout and script-injection patterns. However, all four action references are unpinned and the release workflow has top-level write permissions, creating moderate workflow hygiene risk without evidence of an exploitable sink.