silverstripe/recipe-content-blocks

Release historycaution

The package has a long history with 77 releases, but it has had no registry release in the last 12 months; the latest release was about 17 months ago. This indicates slowing maintenance, though the established release history is compensating evidence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. That is a meaningful maintenance warning, but it does not establish abandonment by itself.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, although the absence of a policy alone does not show that the package is unsafe.

Workflow auditcaution

All 3 analyzed workflows completed the audit without dangerous findings, and 2 use read-only permissions, but all 3 action references are unpinned. The audit is complete, so this is a supply-chain hygiene caution rather than a severe workflow risk.