silverstripe/silverstripe-discoverer

Repo bus factorcaution

All recent commit activity comes from one contributor, creating a narrow maintenance path; organization backing partly reduces the handoff risk.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, which is limited activity, although the recent release history provides some evidence that maintenance has not stopped.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving repository security checks less visible.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-code sinks. Its one action is unpinned, a minor reproducibility concern, while the absence of a top-level permissions block is acceptable on its own.