vivutio/ticketing-module

Release historycaution

The package is less than one day old with three releases clustered within about eight hours, so there is not yet enough history to demonstrate reliable maintenance.

Repo commit activitycaution

The repository has zero commits and zero active maintainers in the last three months; because the package is newly published, this is mainly a lack of evidence for sustained maintenance rather than proof of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented for a package that handles ticket and traveller records.

Version stabilitycaution

Version v0.1.2 is not a stable-major release, which is normal for an initial package but leaves compatibility maturity unproven.

Workflow auditcaution

All five action references are unpinned and one release workflow has top-level write permissions, creating avoidable workflow hygiene risk. The high-confidence template-injection finding also warrants attention, although no untrusted checkout or script-injection trigger was reported.