netgen/layouts-ui

Release historycaution

The package has 22 releases over roughly eight years and a release within the last year, but only one release in the last 12 months indicates a relatively slow cadence.

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown in the collected period.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer, which indicates limited recent maintenance activity despite the recent push.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap for a maintained package.

Workflow auditcaution

Both workflows were analyzed without untrusted triggers or broad top-level write permissions, but all six action references are unpinned and a high-confidence finding identifies an unpinned container image; a low-confidence-independent hygiene finding also installs a package outside a lockfile.