symbiote/silverstripe-queuedjobs

Repo bus factorcaution

One contributor made all recent commits, concentrating the short-term maintenance activity completely in one person. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only 3 commits were made in the last 3 months, which is modest activity for a mature package. Recent work is present, but the pace provides only limited evidence of broad ongoing maintenance.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a maintenance and process gap, not evidence that the package is unsafe.

Workflow auditcaution

All 6 analyzed action references are unpinned, which weakens build reproducibility. However, the audit found no dangerous checkout or script-injection sinks, and 5 workflows use read-only permissions, limiting the impact.