netgen/ez-forms-bundle

Release historydanger

The package has had 16 releases since 2015, but none in the last 12 months; the latest registry release was about six years ago. This strongly suggests abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since its last push. This materially lowers confidence in ongoing maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with one issue and one pull request still open. This provides no evidence of active support.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, though it does not by itself show unsafe code.

Workflow auditcaution

Both workflows were fully analyzed with no detected injection or dangerous-trigger findings, but all four referenced actions are unpinned. The missing top-level permissions blocks are acceptable on their own, while unpinned actions remain a modest reproducibility risk.