netgen/layouts-sylius

Workflow auditdanger

All 8 analyzed action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in a workflow. The workflows have no untrusted checkout or script-injection trigger, which limits the risk but does not remove reproducibility concerns.

Repo bus factorcaution

All 3 recent commits came from one contributor, concentrating current maintenance capacity and increasing continuity risk if that contributor becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a gap in the project's visible automated security hygiene.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented for consumers or contributors.