contenir/contenir-formbuilder

Release historycaution

The package is brand new, with 10 releases on the same day and no established release interval. That limits evidence of long-term maintenance, although the current release activity is substantial.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last three months, which leaves long-term maintenance capacity unproven. Recent activity and eight merged pull requests in one month provide some compensation but do not establish a sustained history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving the preferred reporting and response process unclear for a package handling form submissions.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous checkout or injection trigger, but it has one high-confidence medium-severity secrets-inherit finding and its only action reference is unpinned. The absence of a top-level permissions block is acceptable on its own.