studioespresso/craft-navigate

Repo bus factorcaution

All recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating sparse recent development even though the repository remains active.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Version stabilitycaution

Version 6.0.0-alpha.2 is explicitly a prerelease, so compatibility may still change despite the package having a stable major line.

Workflow auditcaution

Both analyzed workflow action references are unpinned, which weakens build reproducibility; the audit otherwise found no injection, token, or high-confidence workflow findings.