plan2net/typo3-update-check

Repo bus factorcaution

All 30 recent commits came from one contributor, creating a genuine continuity risk. Organization backing partly compensates because maintenance can be handed off, but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a Composer plugin that processes update and security information.

Workflow auditcaution

Both workflows were analyzed successfully with no reported audit findings or untrusted execution sinks, but all 25 action references are unpinned and one workflow grants top-level write access, creating avoidable automation and reproducibility concerns.