@capacitor/keyboard

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, which conflicts with the recent release and issue activity and raises a maintenance caution.

Repo toolingcaution

The project uses TypeScript, Rollup, and npm scripts, but no security-scanning tools were detected; this is a modest transparency and hygiene gap.

Workflow auditcaution

All 12 analyzed action references are unpinned, and one workflow has top-level write permissions; the audit also found a high-confidence low-severity adhoc package installation. No untrusted checkout or script injection was detected, so this is workflow hygiene rather than a severe risk.