nails/module-admin

Release historycaution

Only two releases are recorded, with the latest in September 2018 and none in the last 12 months. Active repository commits partly compensate for the stale registry release cadence, but the published release history remains a concern.

Repo bus factorcaution

Three contributors were active, but the leading contributor made about 84% of recent commits. Organization backing reduces handoff risk, though contribution remains concentrated.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent.

Version stabilitycaution

Version 0.1.1 is not a stable major release, which indicates an early-stage compatibility profile. It is not marked prerelease, so this is a modest rather than severe concern.

Workflow auditcaution

All 10 analyzed action references are unpinned, and the audit found two high-confidence template-injection findings in one workflow. No untrusted checkout or script-injection trigger was found, so this is workflow hygiene risk rather than a severe standalone verdict.