nzta/silverstripe-sitebanner

Repo commit activitycaution

No commits and no active maintainers were recorded in the last 3 months. Combined with two releases in the last year, this indicates a small or currently paused maintenance effort and lowers confidence in rapid fixes.

Repo issue activitycaution

There are only 2 open issues and no new or closed issues, pull requests, or merged pull requests in the last month. This is quiet rather than clearly abandoned, but it provides little evidence of active issue handling.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. The missing scanner is a meaningful hygiene gap for a dependency, though it is not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations unclear, which modestly reduces transparency.

Workflow auditcaution

The one workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, and it has no broad top-level write permission. However, its single action use is unpinned, so the workflow has a supply-chain hygiene gap.