recranet/craft-forms

Release historycaution

The package is only 42 days old, despite 20 releases, so its maintenance record and long-term stability are not yet established.

Repo bus factorcaution

All 66 recent commits came from one contributor, creating a concentrated maintenance dependency even though the repository is organization-owned.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security coverage limited.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and handling expectations unclear for a package that processes form submissions and uploads.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all three referenced actions are unpinned, weakening build reproducibility and supply-chain hygiene.