nswdpc/silverstripe-analytics-chooser

Repo bus factorcaution

One contributor made all 5 commits in the last 3 months. Organization ownership provides some handoff capacity, but the observed maintenance activity remains concentrated in one person.

Repo toolingcaution

The project uses Composer for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence of an unsafe release by itself.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or audit findings, and it has no top-level write permissions. Both action references are unpinned, however, which weakens build reproducibility.