fullcalendar/fullcalendar-scheduler

Release historycaution

The registry shows no releases in the last 12 months, and the latest release was in November 2021—nearly five years ago. Active repository commits partly offset the stale registry cadence, but the published release line appears abandoned.

Repo toolingcaution

No build tools or security-scanning tools were detected. The absence of security scanning is a real maintenance and transparency gap, although the repository's active development provides some compensation.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear for a package intended for application integration.

Version stabilitycaution

This assessed release is an alpha, while the package's latest recorded version is v1.10.4 and the package is now on a stable major line. Choosing this prerelease increases compatibility and support uncertainty.

Workflow auditcaution

Both workflows omit top-level permissions, which is acceptable on its own, but all six analyzed action references are unpinned. The high-confidence trusted-publishing finding also indicates long-lived registry credentials, creating workflow supply-chain hygiene concerns.