thomasvantuycom/statamic-iban-fieldtype

Release historycaution

The package is only about four months old and has two releases, with the latest about three months ago. That is limited evidence of long-term maintenance, though the project is still young.

Repo bus factorcaution

One contributor made all two recent commits, leaving maintenance concentrated entirely in a single person.

Repo commit activitycaution

Only two commits were made in the last three months, indicating limited observed maintenance activity for a package with a short history.

Security policycaution

The repository has no security policy. For a small fieldtype this is a modest transparency gap, but it leaves no documented process for reporting vulnerabilities.

Workflow auditcaution

All eight analyzed action references are unpinned, and the release workflow has top-level write permissions and two high-confidence archived-action findings. No untrusted checkout or script-injection sink was found, so this is workflow hygiene risk rather than a severe standalone threat.