terminal42/contao-node

Repo bus factorcaution

All 2 commits in the last 3 months came from one contributor, giving the recent activity a 100% concentration. Organization backing provides some handoff capacity, but the observed contributor base remains narrow.

Repo commit activitycaution

The repository had 2 commits in the last 3 months, showing some recent activity, though the volume is modest for a maintained project. Release history partly compensates for the limited recent commit count.

Repo toolingcaution

The project uses Composer build tooling but reports no security-scanning tools. The missing scanning layer is a modest transparency and maintenance concern, not evidence of a defective release.

Security policycaution

The linked repository has no SECURITY.md or other detected security policy. This weakens the project's documented vulnerability-reporting process, although it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no high- or medium-confidence audit findings. However, its one action reference is unpinned, leaving a small reproducibility and supply-chain hygiene gap.