vue-chartjs

Project backingcaution

The repository is owned by an individual rather than an organization, so maintenance continuity depends more heavily on the small active contributor base.

Repo bus factorcaution

Two contributors were active recently, with the leading contributor responsible for two of three commits. The second active contributor provides some continuity, but the recent base remains small.

Repo commit activitycaution

Only three commits were made in the last three months, although two maintainers contributed and the repository was recently updated; this is slower activity but not evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All 18 analyzed action references are unpinned, weakening workflow reproducibility. The audit also reported a high-severity cache-poisoning pattern with low confidence and trusted publishing; the low-confidence cache finding is hygiene-level, while trusted publishing warrants caution.