mediatis/form_fieldnames

Licensecaution

The artifact contains a license file, but it identifies GPL-2.0 while the manifest declares GPL-2.0-or-later, leaving a licensing-scope mismatch to clarify.

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; organization ownership provides some capacity to hand off maintenance but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, so current development activity is limited despite the recent release.

Security policycaution

The repository has no published security policy, which is a modest transparency gap for reporting vulnerabilities.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and pins all actions, but it has a high-confidence finding for an unpinned container image.