typo3/class-alias-loader

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This is a maintenance caution, although the recent release history provides some compensating evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or untrusted checkout paths, but both action references are unpinned. The lack of a top-level permissions block is acceptable on its own.