opscale-co/nova-bpmn-field

Release historycaution

The package is young, with two releases over about 19 days, so its maintenance record is still limited. The latest release includes documented bug fixes, providing some evidence of active early development.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. With the latest release in May 2026, this is a meaningful sign that maintenance may have slowed.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, but it is not evidence that the package is unsafe by itself.

Workflow auditcaution

All 15 action references are unpinned, and a high-confidence bot-conditions finding affects auto-update.yml; two workflows also grant top-level write access. The pull_request_target trigger has no untrusted checkout or script-injection sink, limiting this to workflow hygiene and process risk.