plaisio/flash-message-core

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a meaningful maintenance concern despite the recent registry release.

Repo popularitycaution

The repository has 0 stars and 0 forks, with 1 watcher; this offers little independent adoption evidence, though low popularity alone does not indicate abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap but not a standalone severe risk.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings, but all 4 action references are unpinned, weakening build reproducibility and supply-chain hygiene.