concept7/statamic-optimize-stache

Release historycaution

The package has only two releases, published minutes apart, and none in the last 12 months despite being about 573 days old. That materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance despite its non-archived status.

Security policycaution

The README directs users to a security policy, but the repository has no security policy file. That leaves vulnerability reporting less transparent.

Version stabilitycaution

Version 0.0.2 is not a stable major release, so compatibility and project maturity are less established, although it is not marked as a prerelease.

Workflow auditcaution

All 12 analyzed action references are unpinned, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe supply-chain verdict.