restruct/silverstripe-copybutton

Repo bus factorcaution

All 18 commits in the last three months came from one contributor, giving the project a narrow operational base. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is used, but no security scanning tool was detected; this is a transparency and monitoring gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.