nucleos/form-extensions

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a maintenance concern, although the recent release provides some compensating evidence.

Repo popularitycaution

The repository has only 3 stars, no forks, and no watchers, indicating limited visible adoption. Popularity is supporting evidence, so this lowers confidence in project depth but does not make the package unsafe by itself.

Repo toolingcaution

Composer and Make are used for builds, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without audit findings or untrusted code paths, but both action references are unpinned. The workflows also lack top-level permissions blocks, which is acceptable on its own but provides less explicit permission hardening.