silverstripe/iframe

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported. That is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented. This lowers transparency, although the repository is otherwise actively maintained and backed by an organization.

Workflow auditcaution

All six analyzed action references are unpinned, which weakens build reproducibility and update control. The audit found no injection, untrusted checkout, excessive top-level write permissions, or other high-impact workflow findings.