slack-incoming-webhook-plugin

Repo bus factorcaution

One contributor made six of seven recent commits, so maintenance is concentrated, although a second contributor remains active and the repository is organization-owned.

Security policycaution

The repository has no documented security policy, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

All six action references are unpinned, and the release workflow has a high-confidence template-injection finding; however, no untrusted checkout, script-injection, or broad top-level write permission was observed, limiting this to a caution.