shel/neos-colorpicker

Maintainerscaution

Only one registry maintainer is listed, leaving limited publishing redundancy; the linked repository is user-owned rather than organization-backed, so no compensating project backing is shown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance even though the package has a recent release.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tool is configured, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings and no untrusted trigger or checkout risk, but both action references are unpinned, which weakens build reproducibility.