nswdpc/silverstripe-dataobject-editable

Repo bus factorcaution

All 2 recent commits came from one contributor, so maintenance continuity depends heavily on a single active person. Organization backing provides some handoff capacity but does not remove the current concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a maintenance and transparency gap rather than evidence of malicious behavior.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response expectations undocumented.

Token permissionscaution

The CI workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege settings would provide stronger workflow hygiene.