nswdpc/silverstripe-thereisnouserform

Repo bus factorcaution

All four recent commits came from one contributor, creating a real continuity risk. The organization-owned repository provides some compensation because maintenance can potentially be handed off internally.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected, leaving a modest gap in automated supply-chain oversight.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Token permissionscaution

The CI workflow does not declare top-level token permissions. Although no write permissions were observed, explicit least-privilege settings would provide stronger workflow safety evidence.