superbig/craft-reports

Release historydanger

The package has had no registry release in nearly seven years, despite eight releases overall, which is a substantial abandonment concern for a framework plugin.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, weakening the evidence that bugs and compatibility changes are being maintained.

Repo issue activitycaution

There are 13 open issues but no new or closed issues and no pull-request activity in the last month, indicating that reported maintenance needs are not being actively handled.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

All four workflows were analyzed with no dangerous sinks or high-confidence findings, but all nine action references are unpinned; this is a supply-chain hygiene weakness rather than a severe risk on its own.