bernskioldmedia/events-calendar-ical-feeds

Release historycaution

The package has had no registry release in more than two years, despite 15 releases overall. This raises maintenance and abandonment concerns, although the repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This weakens evidence of ongoing maintenance despite the recent repository push timestamp.

Workflow auditcaution

All 17 action references are unpinned, and two workflows grant top-level write permissions. The audit also reports high-confidence bot-condition and template-injection findings; these are workflow hygiene risks, though no untrusted checkout or script-injection path was found.