web-vision/deepl-write

Package scaffoldingcaution

The package has a substantial README and release notes for version 2.0.1, while the repository has tests; the README transparently describes the extension as early and unstable beta software.

Repo bus factorcaution

One contributor made 48 of 49 recent commits, so maintenance is highly concentrated despite the organization-owned repository and one additional active contributor.

Version stabilitycaution

The assessed release is marked non-prerelease and part of a stable major line, although the reported latest registry version is inconsistent with the assessed version and lowers confidence in the metadata.

Workflow auditcaution

All six workflows were analyzed with no untrusted checkouts or script-injection findings, but all 14 action references are unpinned and high-confidence template-injection findings appear in the publishing workflow. These are workflow hygiene and release-process concerns, not evidence of compromise on their own.