mwstake/mediawiki-component-formengine

Repo bus factorcaution

One contributor made 100% of the single recent commit. Organizational ownership provides some handoff capacity, but the observed recent activity remains concentrated.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months. The current release cadence partly offsets this, but the limited recent development activity is a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning coverage is a modest maintenance and security-hygiene concern.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all 4 action references are unpinned. That leaves builds more exposed to upstream action changes.