mindtwo/typo3-monitoring

Release historycaution

The package is newly published, with two releases on the same day and no established release history. This limits evidence of sustained maintenance but is not abandonment evidence for a package that is only hours old.

Repo commit activitycaution

No commits or active maintainers were recorded in the prior three months, but the package itself is only hours old, so this mainly reflects limited history rather than collapsed maintenance.

Repo toolingcaution

Composer is used as the build tool, but no repository security-scanning tool was detected. The missing scanner is a modest transparency and hygiene gap.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or auditor findings. However, all eight action references are unpinned, which weakens build reproducibility and update safety.