trk/sulu-preline-blocks-bundle

Release historycaution

This is the package's first release, published today, with only one release overall; there is not yet evidence of sustained maintenance or release continuity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Because the package is newly released and was pushed immediately before assessment, this is limited evidence but still leaves maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a repository hygiene gap for a package with a release workflow.

Security policycaution

The repository has no security policy, reducing transparency about how users should report vulnerabilities or receive fixes.

Workflow auditcaution

Both workflows analyze successfully and have no untrusted checkouts or script injections, but all 7 action references are unpinned. The release workflow also contains two high-confidence template-injection findings, which warrants supply-chain caution.