softcreatr/polyfill-calendar

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no observed organizational backing to offset the thin maintenance evidence.

Release historycaution

Only one release has been published over roughly eight months, so there is little release history from which to judge sustained maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months; combined with a single release, this is evidence of limited demonstrated maintenance.

Security policycaution

No security policy was found, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

The workflow audit completed fully with no untrusted triggers, checkout risks, injection findings, or high-severity issues. However, all four action references are unpinned, which leaves the build exposed to upstream action changes.