openeuropa/oe_starter_content

Release historycaution

The package has nine releases over about four years, but no registry release in the last 12 months. The linked repository was pushed recently, which partly offsets the slower release cadence.

Repo bus factorcaution

All three commits in the last three months came from one contributor, giving the project a concentrated recent maintenance base. Organization backing provides some handoff capacity but does not remove the continuity concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed and has no dangerous triggers, untrusted checkouts, or audit findings, but its one action use is unpinned. The missing top-level permissions block is acceptable on its own.