restruct/silverstripe-form-obfuscator

Release historycaution

The package has existed since May 2021 and released version 3.0.0 on the assessment date, but only one release occurred in the last 12 months, indicating a low release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful warning about current maintenance capacity; the same-day release provides only partial compensation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how dependency vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned and the workflow has no top-level permissions block. The missing permissions block is acceptable on its own; unpinned actions remain a supply-chain hygiene weakness.