nepada/phone-number-input

Release historycaution

The package has existed since March 2020 and has 12 releases, but only one release in the last 12 months with a median interval of about 203 days indicates a slow cadence.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing reduces the risk somewhat, but no second active contributor is shown to provide current handoff capacity.

Repo commit activitycaution

Only one commit was recorded in the last three months, so current development activity is limited despite the recent repository push.

Security policycaution

No repository security policy is published, reducing the transparency of vulnerability reporting and response expectations.

Workflow auditcaution

The sole workflow was fully analyzed and uses read-only permissions, with no untrusted checkout or script-injection path. However, all 10 action references are unpinned and the audit reported a medium-confidence bot-condition warning, leaving CI reproducibility and workflow hygiene concerns.