bitbag/user-com-plugin

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a concrete maintenance concern despite the repository remaining unarchived.

Repo issue activitycaution

No issues or pull requests were opened or closed in the last month, leaving little evidence of current project interaction.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link may not clearly establish that this repository publishes the package.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All six analyzed action references are unpinned, weakening build reproducibility. The audit found only low-confidence cache-poisoning patterns, with no untrusted checkout, script injection, or dangerous trigger, so this is a hygiene concern rather than a severe workflow risk.