restruct/silverstripe-signed-asset-urls

Repo bus factorcaution

All three recent commits came from one contributor. Organization backing provides some handoff capacity, but the observed maintenance base remains concentrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-maintenance gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerability reports are handled.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers or audit findings, but all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.