putyourlightson/craft-blitz

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting expectations unclear for a package used in CMS installations.

Version stabilitycaution

This assessed release is a beta while the latest version is a stable 5.13.3, so it carries more compatibility risk than the project's stable release line.

Workflow auditcaution

Both workflows were analyzed with no audit findings, no untrusted checkouts, and no script-injection paths; however, all four action references are unpinned, weakening build reproducibility and update safety.