unplugin-vue-components

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the past three months. This conflicts with the recent registry release history and raises a maintenance-continuity concern.

Repo issue activitycaution

Issue and pull-request activity is subdued: no new issues or pull requests and no merged pull requests were recorded in the past month, though two issues were closed.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting vulnerabilities, although it is partly offset by the repository's security scanning and organizational backing.

Workflow auditcaution

All three workflows were analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection paths. However, all eight action references are unpinned and two high-confidence low-severity findings install packages outside a lockfile, creating workflow reproducibility and hygiene concerns.