statikbe/craft

Dependency profilecaution

The starter package declares 31 runtime dependencies, creating a broad dependency surface for consumers, although that breadth is consistent with a full Craft CMS project template.

Repo bus factorcaution

Three contributors were active, but one made 84% of recent commits. The organization backing provides some handoff capacity, so this is a moderate concentration concern rather than a severe abandonment risk.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The audit covered all 7 workflows with no reported injection or high-confidence findings, but all 19 action references are unpinned and two workflows grant top-level write permissions. The unpinned actions are a supply-chain hygiene concern; the write permissions are only a mild concern without an untrusted trigger or sink.