visuellverstehen/statamic-picturesque

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have slowed after the latest release.

Repo issue activitycaution

There are no open issues and one open pull request, but no issues or pull requests were created or merged in the last month; this is mild supporting evidence of limited current activity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving repository security checks less visible.

Security policycaution

The repository has no security policy, so there is no documented path for reporting vulnerabilities or explaining its security process.

Workflow auditcaution

All four workflows were analyzed, but all ten action references are unpinned. The audit also found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow; top-level write permissions in two workflows add exposure, though no untrusted checkout or script injection was detected.