webcoast/dot-forms

Release historycaution

The package has seven releases over about two years, but only one release in the last 12 months, indicating a slower maintenance pace.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, which weakens evidence of current maintenance despite the recent repository push.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection trigger, but both action references are unpinned and high-confidence template-injection findings remain hygiene concerns.