motor-cms/motor-core

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting vulnerabilities, though this is not evidence of abandonment by itself.

Version stabilitycaution

This is a release candidate, so it carries more change risk than a final release, although only 10% of recent releases are prereleases and the major line is stable.

Workflow auditcaution

The sole workflow uses top-level write permissions and both of its actions are unpinned, creating a modest reproducibility and token-scope concern. The audit found no untrusted checkouts, script injection, or severity-rated findings.