nswdpc/silverstripe-csp

Repo bus factorcaution

One contributor made all 30 commits in the last three months. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving a real continuity risk.

Repo issue activitycaution

Seven issues remain open and there were no issues or pull requests opened or closed in the last month. Recent commit activity offsets this somewhat, but issue follow-through is not demonstrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. For a module handling Content Security Policy and violation reports, the missing vulnerability-reporting guidance is a genuine transparency gap.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkout, injection, or high-confidence audit findings, but both analyzed action references are unpinned. That leaves avoidable dependency-integrity risk in CI.