mautic/theme-welcome

Licensecaution

No declared license, license file, or repository license file was detected, leaving the terms for dependency use unclear.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The frequent registry releases and README explanation partly compensate because this is a centrally managed read-only mirror, but they do not show activity in this repository itself.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, reducing clarity about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow is fully analyzed and has no reported audit findings or untrusted checkout/script-injection sinks. However, its one action reference is unpinned, which is a minor supply-chain hygiene gap; the pull_request_target trigger is not dangerous without a sink.