towardstudio/linkfield

Release historycaution

The package has had four releases since March 2024, but none in the last 12 months; the latest release was in October 2024. This indicates a substantial maintenance pause for a package tied to an evolving CMS.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the release pause. That weakens evidence of ongoing maintenance.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, especially for a plugin that runs inside a CMS application.

Version stabilitycaution

The assessed version is marked stable, but the collected registry profile reports 2.2.0 as the latest version while the assessment targets 3.0.1. This inconsistency reduces confidence in the release metadata.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a moderate reproducibility and supply-chain hygiene concern.