pixelmairie/sulu-townhallbundle

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk. Organization ownership provides some ability to hand off maintenance, so this is a caution rather than a severe risk.

Repo commit activitycaution

There was one commit in the last 3 months, so recent source activity is present but thin. The regular release history partly offsets this limitation.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, but it is not evidence of abandonment by itself.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-confidence audit findings. However, all four referenced actions are unpinned, leaving a modest supply-chain hygiene gap.