sbuerk/typo3-site-based-test-trait

Release historycaution

The package has six releases, but none in the last 12 months and its latest registry release was over a year ago. This lowers confidence in ongoing release maintenance despite the recent 3.0.0 release history being documented.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance slowdown, although the repository was pushed more recently than the registry release.

Security policycaution

No repository security policy was found. This is a transparency and reporting gap, but it does not by itself show that the package is unsafe to depend on.

Workflow auditcaution

All seven analyzed action references are unpinned, and the publish workflow contains two high-confidence template-injection findings. No untrusted checkout or dangerous trigger was reported, so these are workflow-hygiene concerns rather than standalone severe risk.