netgen/content-browser-ui

Workflow auditdanger

Both workflows were analyzed without failures and have no untrusted triggers or script-injection findings, but all six action references are unpinned and the audit found a high-confidence high-severity unpinned container image. This leaves the build exposed to changing upstream code.

Repo bus factorcaution

One contributor made all commits in the last three months, leaving recent activity dependent on a single individual. Organization backing partly offsets handoff risk but does not remove the thin activity signal.

Repo commit activitycaution

The repository recorded only one commit in the last three months, indicating limited recent maintenance activity and lowering confidence in ongoing support.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected. This is a moderate transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, so users lack a documented channel and process for reporting vulnerabilities.