silverstripe/login-forms

Repo bus factorcaution

One contributor made 100% of the single recent commit. Organization ownership provides some handoff capacity, but no second recently active contributor is shown, leaving current work concentrated.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, from 1 active maintainer. Despite the recent release history, this indicates thin current maintenance activity.

Security policycaution

The repository has no security policy. For a module involved in CMS login screens, this is a meaningful transparency gap, although it does not by itself show unsafe code.

Workflow auditcaution

All 7 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout or script-injection sink, and 6 workflows use read-only permissions, limiting the severity.