silverstripe/campaign-admin

Repo commit activitycaution

Only 2 commits were made in the last 3 months, so direct development activity is modest. Recent releases and merged pull requests provide some compensating evidence, keeping this as a caution rather than a severe abandonment signal.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap, not evidence that the package is unmaintained.

Security policycaution

The repository has no security policy, leaving reporting and response expectations unclear. This lowers transparency modestly but does not by itself make the release unfit.

Version stabilitycaution

This release is a beta despite being on a stable major line, so it may carry more change risk than a stable patch release. Recent prereleases make this a limited concern rather than evidence of instability across the package.

Workflow auditcaution

All seven workflows were analyzed with no audit findings, and six use read-only permissions; the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all seven action references are unpinned, which is a supply-chain hygiene concern.