netgen/layouts-contentful

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, which indicates a recent maintenance pause despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest assurance gap.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and handling expectations undocumented.

Workflow auditcaution

All eight analyzed action references are unpinned, and the audit found a high-confidence unpinned container image. The workflows were fully analyzed and showed no untrusted checkout or script-injection paths, so this is a hygiene caution rather than a severe risk.