webfiori/vuetify-core

Maintainerscaution

Only one registry account has publish access. This is somewhat thin, although the repository is owned by an organization, which provides some backing context.

Repo commit activitycaution

The repository reports zero commits and zero active maintainers in the last three months, which is a maintenance concern. The current release and same-day repository push provide some compensation, but not evidence of a broad active contributor base.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty that this is the package's dedicated source repository.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and review gap.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted checkouts, but both action references are unpinned, so their dependencies are less reproducible over time.