nailsapp/module-comment

Registry deprecationdanger

Packagist marks the entire package abandoned and points to nails/module-comment as its replacement, making this release unsuitable for a new dependency.

Release historydanger

The package has only one release, published about 11 years and 8 months ago, with no releases in the last 12 months; this is strong evidence of release abandonment.

Repo bus factorcaution

All recent repository activity came from one contributor, leaving maintenance capacity concentrated despite the repository being organization-owned.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

All 9 action references are unpinned, and the audit found two high-confidence template-injection findings in the migration workflow. The workflows avoid dangerous trigger and untrusted-checkout patterns, but these remaining issues are material hygiene and supply-chain concerns.