think-digital-agency/contao-grid-plugin

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual account rather than an organization; this provides direct ownership alignment without strong institutional backing evidence.

Release historycaution

The package is only 12 days old, with five releases and a median interval of about 10 hours, so it has limited evidence of long-term maintenance stability despite active publishing.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a package intended for application integration.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all six action references are unpinned, weakening build reproducibility and action supply-chain protection.