yireo/magento2-page-cache-csp-nonce-regenerator

Release historycaution

Only two releases were published, with the latest about two years ago and none in the last 12 months. Recent repository commits provide some compensating maintenance evidence, but registry delivery is sparse.

Repo bus factorcaution

One contributor made all five recent commits, concentrating maintenance responsibility. Organization backing partly reduces handoff risk, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency gap rather than evidence of unsafe code.

Version stabilitycaution

Version 0.0.2 is not a prerelease, but the package remains below major version 1, so compatibility expectations are less mature.

Workflow auditcaution

All five workflows were analyzed without untrusted triggers or script injection, but four high-confidence findings identify unpinned container images, including floating latest tags. This weakens reproducibility and build integrity.