nswdpc/silverstripe-cache-headers

Repo bus factorcaution

All five recent commits came from one contributor, so maintenance depends heavily on a single person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

The workflow audit completed successfully with no untrusted checkouts, injection findings, or write-wide permissions. However, both referenced actions are unpinned, reducing build reproducibility and supply-chain hygiene.