drupal-tome/bookish

Release historydanger

The package has had no release in nearly four years, with zero releases in the last 12 months. Its six-release history and previously regular roughly 38-day intervals provide some evidence of an established project, but not of current maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment concerns.

Workflow auditcaution

Both workflows were fully analyzed and had no untrusted checkout or script-injection paths, but the test workflow uses an unpinned container image with high-confidence detection. This is a supply-chain hygiene and reproducibility concern, not a standalone disqualifier.