crmleaf/pf-calculator

Release historycaution

The package is only 35 days old and has one release, so its maintenance track record and compatibility history are not yet established.

Repo bus factorcaution

One contributor made all eight recent commits, leaving the project dependent on a single active contributor despite organizational ownership.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no detected injection or high-severity findings. However, all 12 action references are unpinned, which weakens build reproducibility and supply-chain protection.