kirbydesk/kirby-explorer

Release historycaution

The package is 0 days old with only 3 releases, so there is not enough history to demonstrate sustained maintenance or reliable release practice.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a package that operates inside a CMS project.

Workflow auditcaution

The sole workflow grants top-level write permissions and both of its action references are unpinned. No untrusted checkout or script-injection path was found, so this is a hygiene concern rather than a severe risk.