sanderjn/statamic-agentic

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so the concentrated maintainer activity represents a genuine single-person continuity risk.

Release historycaution

The package is young at 57 days with two releases, so its long-term maintenance record is not yet established, though the releases were close together rather than showing abandonment.

Repo bus factorcaution

All 22 recent commits came from one contributor, leaving maintenance dependent on a single person and creating a real continuity concern for this user-owned project.

Security policycaution

No repository security policy was found, reducing transparency about how vulnerabilities should be reported and handled.

Token permissionscaution

The single analyzed workflow has no top-level token permissions declaration. No write permissions were observed, but explicitly restricting workflow permissions would provide stronger security hygiene.