themusicdev/contact

Release historycaution

This is the first release and the package is only 0 days old, so there is no release history yet to demonstrate sustained maintenance.

Repo bus factorcaution

One contributor made all 7 recent commits, creating concentration risk. The organization-owned repository provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Seven commits in the last 3 months show active initial development, but the short observation window provides limited evidence of long-term maintenance.

Security policycaution

The repository has no security policy, which is a transparency gap for a package handling contact-form data, though the repository does use Dependabot scanning.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 action references are unpinned, leaving CI exposed to action changes over time.