plaisio/form

Dependency profilecaution

The package declares 14 runtime dependencies, creating a moderately broad dependency surface for consumers, but the signal does not show unusual or clearly risky dependencies.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance activity has recently stopped.

Repo popularitycaution

The repository has zero stars and forks and one watcher, providing little community corroboration; popularity is only supporting evidence, so this is a modest concern rather than a verdict.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented and creating a transparency gap.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported findings or untrusted sinks. However, all four action references are unpinned, leaving avoidable workflow supply-chain hygiene risk.