yoast-seo-for-typo3/yoast_seo

Repo bus factorcaution

One contributor made all three commits in the last three months. The organization-owned repository provides some handoff capacity, so this is a maintenance concentration concern rather than a severe bus-factor risk.

Repo commit activitycaution

Only three commits were made in the last three months, which indicates limited recent development activity despite the recent release and repository update.

Repo toolingcaution

The repository uses Composer and make, but no security-scanning tools were detected. This is a modest transparency and hygiene gap, not evidence of unsafe code.

Workflow auditcaution

All three workflows were analyzed, but all five action references are unpinned. The audit also found a high-confidence template-injection pattern in publish.yml; with no untrusted checkout or script-injection trigger reported, this remains workflow hygiene risk rather than a standalone severe finding.