craftcms/contact-form

Release historycaution

The package has 26 releases over more than nine years, but none in the last 12 months; its latest registry release was over two years ago. This is a meaningful maintenance concern despite its historically regular release interval.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository was pushed recently, the measured lack of recent commit activity lowers confidence in ongoing maintenance.

Workflow auditcaution

All three analyzed workflow action references are unpinned, which leaves build automation exposed to moving dependencies. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, so this is a hygiene caution rather than a severe risk.