softspring/cms-sections-plugin

Repo bus factorcaution

All 5 commits in the last 3 months came from one contributor. Organization backing provides some handoff capacity, but current activity remains concentrated.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The single workflow has read-only permissions and no detected audit findings, but all 10 action references are unpinned, weakening build reproducibility and update control.