nswdpc/silverstripe-taggable-notifications

Repo bus factorcaution

All 7 recent commits came from one contributor, leaving maintenance dependent on a single active developer despite the project's organizational ownership.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving security-process coverage limited.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully audited with no dangerous triggers or audit findings, but both of its 2 action references are unpinned, weakening build reproducibility.