typedef/craft-content-review

Release historycaution

This is a young package, only 25 days old with one release, so its maintenance record and compatibility history are not yet established.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited observed maintenance activity; the package is also very new, so the evidence is preliminary.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security quality checks less visible.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and coordinated disclosure less transparent.

Workflow auditcaution

The only workflow was fully analyzed with no reported audit findings and scopes permissions at job level. Its one action reference is unpinned, a minor reproducibility and supply-chain hygiene gap.