reecem/static-form

Release historydanger

The latest release was about four years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of inactive maintenance, although the package has an established release history.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long gap since the latest release. The repository is not archived, but current maintenance capacity is not demonstrated.

Workflow auditcaution

All 7 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image. The workflows have no untrusted triggers or script-injection findings, which limits the concern to build hygiene rather than a severe workflow risk.