nextras/form-components

Release historycaution

The package has existed for about 7 years but has only 6 releases, with a median interval of about 14 months and one release in the last 12 months. This indicates a slow maintenance cadence, though the recent v3.0.0 release is current evidence of activity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The recent release partly offsets this, but the short observation window provides limited evidence of ongoing maintenance after the release.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. This is a modest repository hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it does not by itself indicate abandonment.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings. However, all 3 action references are unpinned, leaving them exposed to upstream changes.