tractorcow/silverstripe-fluent

Repo bus factorcaution

One contributor made all commits in the last 3 months, leaving current maintenance dependent on a single active contributor; organization backing provides some handoff capacity but no second recent contributor is shown.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating narrow recent maintenance activity even though the package continues to release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users are given less explicit guidance for reporting and handling vulnerabilities.

Workflow auditcaution

All 7 analyzed action references are unpinned, which weakens build reproducibility. However, six workflows use read-only permissions and the audit found no untrusted checkout, script injection, or other high-confidence findings.