nswdpc/silverstripe-asset-scan

Repo bus factorcaution

All 8 recent commits came from one contributor, leaving maintenance dependent on a single active person; organization ownership provides some handoff capacity but does not remove the concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving security hygiene less visible.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, injection findings, or audit findings, but both action references are unpinned, reducing build reproducibility and supply-chain protection.