mandrael/contao-turnstile

Repo bus factorcaution

Two contributors were active in the last three months, although one made 87.5% of commits. This is a manageable concentration for a user-owned project but leaves limited redundancy.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy, so there is no documented channel or process for handling vulnerability reports.

Version stabilitycaution

Version 0.7.1 is not a prerelease, but the package has not reached a stable major version, so compatibility may still change between releases.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, all four action references are unpinned, which weakens build reproducibility and update integrity.