cv-chameleon/nova-flexible-content

Maintainerscaution

One account has registry publishing access, which creates a thin publishing base. The repository is user-owned rather than organization-backed, so there is no provided evidence of broader operational support.

Release historycaution

Only two releases are recorded, with none in the last 12 months; the latest release was over two years ago. This is a meaningful maintenance concern, though the package is not deprecated or archived.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months, indicating no recent maintenance activity. The linked repository is present and not archived, but that does not offset the prolonged inactivity.

Workflow auditcaution

All 8 analyzed action references are unpinned, reducing build reproducibility and increasing exposure to action changes. The audit found no untrusted checkouts, script injection, dangerous triggers, or excessive top-level write permissions.