statamic-addon/component-exporter

Licensecaution

The release declares a proprietary license, so it is licensed, but proprietary terms can restrict transparency and compatibility for developers seeking an open-source dependency.

Repo package mentioncaution

The repository name does not match the package name and the README mention could not be confirmed, creating uncertainty about whether the linked repository directly belongs to this package.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow is fully analyzed, scopes permissions at the job level, and has no dangerous audit findings, but its only action reference is unpinned, weakening build reproducibility.