nailsapp/module-testimonial

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement package identified. This is a severe adoption and maintenance warning despite the repository remaining active.

Release historydanger

The package has only one release, published more than 12 years ago, with no releases in the last 12 months. That makes this specific dependency substantially stale.

Workflow auditdanger

All 10 action references are unpinned, and the audit found two high-confidence template-injection findings in the migration workflow. No dangerous trigger or untrusted checkout was observed, but the confirmed workflow issues are material.

Repo bus factorcaution

One contributor made 100% of the single commit in the last three months. Organization backing provides some handoff capacity, but current observed activity remains concentrated.

Repo commit activitycaution

The repository had one commit from one active maintainer in the last three months, while seven pull requests were merged in the last month. Recent activity is encouraging but thin for a package whose registry release is obsolete.