rmeira/nova-editor-js

Release historydanger

The package has only two releases, both by August 2022, with no release in roughly four years. That makes ongoing compatibility and maintenance uncertain.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with a project that has stopped receiving maintenance.

Security policycaution

The repository has no security policy. This is a transparency gap, though it is less significant than the clear maintenance concerns.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three referenced actions are unpinned, leaving avoidable build-integrity exposure.