t3g/usercentrics

Release historycaution

The registry shows 10 releases but none in the last 12 months, with the latest published in February 2021. This is a meaningful release-maintenance concern, although recent repository activity provides partial compensation.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and assurance gap.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Version stabilitycaution

The assessed version is 10.0.4 while the registry reports 9.0.4 as the latest version, creating uncertainty about how this release is represented and maintained in the registry.

Workflow auditcaution

All six workflow action references are unpinned, weakening build reproducibility. The audit also found high-confidence template-injection patterns in the publish workflow; template injection alone is a hygiene concern here because no untrusted checkout or script-injection sink was reported.