silverstripe/totp-authenticator

Repo bus factorcaution

All recent commits came from one contributor, creating maintenance concentration; organization backing provides some handoff capacity but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating modest recent development activity despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no repository security scanning tools were detected, leaving security-process coverage less visible.

Security policycaution

The repository has no published security policy, so there is no clear documented process for reporting and handling vulnerabilities.

Workflow auditcaution

All seven workflows were analyzed without audit findings, and six use read-only permissions; however, all seven action references are unpinned, weakening build reproducibility and update safety.