linawolf/form_double_opt_in

Repo commit activitycaution

There were no commits and no active maintainers during the last three months. The recent release reduces abandonment concern, but the current pause still weakens maintenance confidence.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. This is a moderate transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Version stabilitycaution

The release is marked stable and not a prerelease, with no recent prerelease releases. The reported latest version is older than the assessed version, which introduces a small data-consistency concern.

Workflow auditcaution

All four analyzed action references are unpinned, and a high-confidence template-injection finding appears in the publish workflow. The workflows have no top-level permissions blocks, which is acceptable on its own, but the unpinned references and publish-workflow finding warrant caution.