terminal42/contao-search-widget

Release historycaution

The package is only 43 days old and has one release, so there is not enough history to demonstrate sustained maintenance. Its youth limits the evidence rather than proving abandonment.

Repo bus factorcaution

All 2 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository has only 2 commits in the last 3 months, providing limited evidence of active maintenance for a newly released package.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, not evidence of an unsafe release.

Workflow auditcaution

The single workflow uses read-only permissions and has no detected audit findings, but its only action reference is unpinned. That leaves avoidable build reproducibility and action-integrity risk.