helios-ag/fm-summernote-bundle

Release historycaution

The package has existed since 2015, but it has had no releases in the last 12 months; the latest release was published about 13 months ago. This indicates a meaningful maintenance slowdown, though the long project history provides some maturity.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. The recent repository push is compensating evidence that the project is not abandoned outright, but the current maintenance pace remains a concern.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting vulnerabilities, but it is not by itself evidence that the package is unsafe to depend on.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all three action references are unpinned. The absence of a top-level permissions block is acceptable here because the workflow does not grant top-level write access.