summernote

Release historycaution

The package has 43 releases over more than 11 years, but none in the last 12 months and its latest registry release was in October 2024, indicating a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which weakens confidence in ongoing maintenance despite the repository not being archived.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations unclear for consumers.

Workflow auditcaution

All 8 analyzed action references are unpinned, and the audit reports a high-severity but low-confidence cache-poisoning pattern plus trusted-publishing usage; complete workflow coverage and no untrusted checkout or script-injection findings are compensating positives.