craue/formflow-bundle

Release historycaution

The package has 36 releases over more than 14 years, but none in the last 12 months and the latest registry release was in January 2024. This is a meaningful maintenance concern despite the long release history.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The 2025 repository push partly offsets this, but the current inactivity still raises abandonment risk.

Repo issue activitycaution

Only one issue was opened and no issues or pull requests were closed or merged in the last month, suggesting limited current maintenance response.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent for consumers.

Workflow auditcaution

All eight analyzed action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in the test workflow. The workflows were fully analyzed and had no untrusted checkout or script-injection findings, but the pinning gap remains a supply-chain hygiene concern.