thoughtco/statamic-plausible-analytics

Release historycaution

The package has only 3 releases over 764 days, with a median interval of about 266 days, although 2 releases arrived in the last 12 months. This indicates a small, slow-moving project rather than clear abandonment.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. A recent release partly offsets this, but the current maintenance capacity is thin.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance concern, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting expectations unclear for consumers of an integration that handles an API key.

Workflow auditcaution

All 5 action references are unpinned, and the audit found a high-confidence archived action. The low-confidence cache-poisoning finding carries little weight, while the fully analyzed workflow has no untrusted checkout or script-injection path.