silverstripe/admin

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. The missing scanner is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations less explicit for a package with an administrative user interface.

Version stabilitycaution

This release is a prerelease despite being on a stable major line, so its API and behavior may still change before final release.

Workflow auditcaution

All seven workflows were analyzed with no audit findings, six workflows use read-only permissions, and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all seven action references are unpinned, which is a supply-chain hygiene weakness.