varsuite/statamic-resend-form-submissions

Release historycaution

The package has only three releases over about 695 days, with a median interval of about 253 days, though two releases arrived in the last 12 months. This indicates a slow but not abandoned cadence.

Workflow auditcaution

The complete audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow, plus an unpinned action and top-level write permissions. No untrusted checkout or script injection was found, so this is a meaningful workflow-hygiene concern rather than a severe standalone risk.