jakota/formhandler

Release historycaution

The package has 64 releases over about four years, but none in the last 12 months despite a median interval of about 5 days, indicating a sharp recent slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Together with the lack of releases in the last 12 months, this is meaningful evidence of stalled maintenance.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities in a form-processing package.

Version stabilitycaution

Version 9.0.0-Alpha22 is explicitly a prerelease, and 75% of recent releases are prereleases, so consumers should expect more change than with a stable release.

Workflow auditcaution

All 8 analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkout, script injection, or high-confidence dangerous finding, so this is a hygiene concern rather than a severe workflow risk.