symbiote/silverstripe-gridfieldextensions

Repo bus factorcaution

All three-month commit activity came from one contributor, creating concentration risk. Organization backing provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating thin recent maintenance despite the current release activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

All six workflows were analyzed without audit findings, and five use read-only permissions; however, all six action references are unpinned, weakening build reproducibility and update control. The pull_request_target trigger has no untrusted checkout or script-injection sink.