rockettheme/toolbox

Repo bus factorcaution

All 5 recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 10 issues and 2 pull requests remain open; this suggests limited community activity but not abandonment given recent commits and releases.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected, leaving a modest project-hygiene gap.

Security policycaution

The repository has no published security policy, making vulnerability-reporting expectations less transparent.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, so their supply-chain versions are not fixed.