helsingborg-stad/municipio-clone

Release historycaution

Twenty releases in three days, with a median interval of about 20 minutes, show active publishing but also reflect a very new project whose release process has not matured.

Repo commit activitycaution

No commits are recorded in the prior three months and no active maintainers are reported for that period. Because the project is only three days old, this mainly means there is not yet a meaningful maintenance history rather than proven abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a plugin that handles database exports and credentials.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned and one workflow grants top-level write access, creating moderate workflow hygiene concerns.