tvalimaa/iframe_cookie_consent

Release historycaution

The package has four releases since May 2023, but none in the past 12 months and the latest was over two years ago. This is a meaningful maintenance concern despite the stable 1.3.2 release.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the past three months, which provides no evidence of current maintenance capacity. The last push coincided with the latest release, so this indicates staleness rather than an archived project.

Repo popularitycaution

The repository has one star, one fork, and one watcher, so there is little visible community support or external scrutiny. Low popularity is supporting evidence only and does not outweigh the matching repository and release documentation.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap for a package that processes embedded third-party content.

Workflow auditcaution

Both workflows use read-only permissions and the audit completed successfully, but one high-confidence medium-severity finding identifies an archived GitHub Action. Two of three action references are unpinned, which is acceptable hygiene but leaves some reproducibility risk.