nswdpc/silverstripe-elemental-quickgallery

Repo bus factorcaution

All four recent commits came from one contributor, so short-term maintenance depends heavily on a single person. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, injection sinks, or audit findings, and it has no top-level write permissions. However, both action references are unpinned, weakening build reproducibility.