marrow/form-builder

Release historycaution

This is a brand-new package with one release and no established release interval, so maintenance maturity cannot yet be demonstrated.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, but the package and repository are only hours old, so this is insufficient history rather than evidence of collapse.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting vulnerabilities in a package intended for application integration.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its two action references are unpinned, creating a reproducibility and action-integrity hygiene gap.