saber13812002/nova-tags-field

Release historycaution

Only two releases were published, both within minutes on the same day, followed by more than two years without a new release. That limited history and long silence raise maintenance risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no activity for over two years.

Security policycaution

The repository has no published security policy. That weakens vulnerability-reporting transparency, although the package does include a license and a structured source repository.

Workflow auditcaution

All 10 action references are unpinned, and a high-confidence audit finding reports an unpinned container image in the PHP CS Fixer workflow. No untrusted checkout or script-injection paths were found, so this is a hygiene concern rather than a severe workflow risk.