necro304/crud-inertia-shadcn

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, a concrete sign that maintenance has stalled recently.

Workflow auditdanger

All 12 analyzed action references are unpinned, and three workflows grant top-level write access. A high-confidence bot-conditions warning also affects the Dependabot auto-merge workflow, although no untrusted checkout or script injection was found.

Lifecycle scriptscaution

A post-autoload-dump script runs during installation. This is worth awareness for dependency review but is ordinary Composer package behavior and is not evidence of poor project health by itself.

Project backingcaution

The package and repository are owned by the same individual account, so there is no organizational backing shown to compensate for the single-maintainer and low-activity profile.

Release historycaution

This is a young package with only one release, published about 10 months ago, so its long-term maintenance record is still unproven.