reachweb/statamic-easy-forms

Repo bus factorcaution

One contributor made all commits in the last three months. Organization backing provides some handoff capacity, but observed activity remains concentrated.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating light recent development despite the strong registry release history.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package name. That weakens package-to-repository transparency even though the repository identity otherwise aligns.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a package that handles frontend form submissions.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, weakening build reproducibility and update control.