backpack/newscrud

Dependency profilecaution

The package has four runtime dependencies, including the paid backpack/pro add-on and an additional editor field, so adoption carries meaningful ecosystem and compatibility assumptions. The dependency set is still moderate rather than unusually broad.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Recent releases and a recent push partly compensate, but the current lack of development activity is a maintenance concern.

Security policycaution

No repository security policy was found. This is a transparency gap for a package used in an admin panel, though other repository and release evidence reduces its severity.

Workflow auditcaution

All workflows were analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, the only action reference is unpinned, leaving a modest reproducibility and action-supply-chain hygiene gap.