stillat/antlers-components

Dependency profilecaution

The package has four runtime dependencies, including PHP, Statamic, Laravel, and a parser library; this is a meaningful integration surface but is expected for a framework addon.

Repo commit activitycaution

There were no commits and no active maintainers in the preceding 3 months, indicating currently quiet development despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities, though this is not by itself evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, injection findings, or elevated permissions, but all 4 action references are unpinned, weakening build reproducibility and update safety.