nystudio107/craft-transcoder

Maintainerscaution

Only one registry account has publish access. The organization-owned repository provides some backing, so this is mainly a publishing concentration concern rather than strong abandonment evidence.

Repo bus factorcaution

All 10 recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership partly compensates because maintenance can potentially be handed off.

Repo toolingcaution

The project uses Make and Composer build tooling, but no security-scanning tools were detected. The established build tooling is positive; the missing scanning is a modest transparency gap.

Workflow auditcaution

All three workflows were analyzed successfully with no audit findings, no untrusted checkouts, and no script injection. However, all seven action references are unpinned, which weakens build reproducibility and supply-chain hygiene.