mwstake/mediawiki-component-runjobstrigger

Release historycaution

The package has 10 releases since April 2021, but none in the last 12 months; the latest release was in July 2025, indicating a currently slow release cadence.

Repo bus factorcaution

One contributor made all two recent commits, concentrating current maintenance in a single person; organization backing provides some capacity for handoff but does not remove the risk.

Repo commit activitycaution

The repository had two commits in the last three months, showing recent activity but limited maintenance throughput.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap rather than evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection trigger, but all five action references are unpinned. Two high-confidence template-injection findings are hygiene concerns without a corroborating dangerous trigger.