johannschopplich/kirby-plausible

Release historycaution

The package has 17 releases since September 2022, but none in the last 12 months and the latest release is over a year old, indicating slowed maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, reinforcing the evidence of currently inactive maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap but not evidence that the package is unsafe.

Workflow auditcaution

All three action references are unpinned and the release workflow grants top-level write permissions. The cache-poisoning finding has low confidence, so it is hygiene rather than a severe risk.