1994/ghostwriter-craft

Release historycaution

The package is extremely new, with two releases in less than one day and no established release history. That limits evidence of long-term maintenance and compatibility.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the past three months. Although the repository was pushed recently and shows 29 merged pull requests in the past month, the commit metric gives limited evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest repository hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package that integrates with Craft CMS and external services.

Workflow auditcaution

The sole workflow uses read-only permissions and has no detected dangerous audit findings, but all three action references are unpinned, so their contents can change without a version pin.