su-sws/react_paragraphs

Repo bus factorcaution

One contributor made all commits in the last 3 months, giving the recent activity a 100% concentration. Organization backing partly reduces handoff risk, but the observed contributor base remains thin.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating limited recent development activity. The recent release provides some counterweight, but the activity level still lowers confidence in maintenance pace.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. The absence of scanning is a hygiene gap, not evidence of abandonment by itself.

Security policycaution

No security policy is present in the repository. This limits published guidance for reporting vulnerabilities, though it does not by itself show that the package is unsafe to depend on.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkout or script-injection findings, and one workflow scopes permissions at job level. However, all 10 action references are unpinned and the auditor found a high-confidence, high-severity use of a container image tagged latest, which weakens build reproducibility.