pavloniym/nova-action-buttons

Maintainerscaution

Only one registry account has publish access. That is a real continuity and bus-factor concern because no organization backing or second publisher is shown.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. The same-day release and recent release history partly offset this, but the current contribution activity is weak.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap for a package with a build process.

Security policycaution

The repository has no published security policy. This limits the documented process for reporting and handling vulnerabilities, though it is not evidence of a vulnerability itself.

Workflow auditcaution

The only workflow was fully analyzed with no audit findings or untrusted checkout paths, but both of its two action references are unpinned. That leaves avoidable reproducibility and action-supply-chain exposure.