interaction-design-foundation/nova-html-code-field

Release historycaution

The package has made no registry release in the last 12 months, and its latest release was nearly two years ago. This raises maintenance and compatibility risk, although the repository shows more recent activity.

Repo commit activitycaution

The repository recorded one commit from one active maintainer in the last three months. This is evidence of some ongoing work but represents a thin maintenance signal.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented for consumers.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, script injection, or high-confidence findings. However, both analyzed action references are unpinned, leaving avoidable build-integrity risk.