oliverthiele/ot-sitekit-base-distribution

Dependency profilecaution

The distribution declares 40 runtime dependencies, including the TYPO3 core and many extensions. This is expected for a curated base distribution, but it creates a broad upgrade and compatibility surface.

Repo bus factorcaution

All 7 recent commits came from one contributor, giving the project a complete single-person dependency. That materially increases continuity risk if the maintainer becomes unavailable.

Repo toolingcaution

Composer is used for the build, which fits this package, but no security scanning tools were detected. The lack of automated security checks is a transparency and maintenance gap.

Security policycaution

The repository has no security policy. This does not show a security defect, but it leaves vulnerability reporting and response expectations undocumented.