wwwision/neos-submissions

Release historycaution

The package is only 0 days old with four releases in roughly 18 hours, so its maintenance track record and production maturity are not yet established.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single person with no demonstrated backup.

Repo commit activitycaution

Two commits were made in the last 3 months, including activity immediately before this release; this is positive but still too little history to demonstrate sustained maintenance.

Security policycaution

The repository has no security policy, which is a transparency gap for a package that stores and manages form submissions.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no detected injection or high-confidence audit findings. However, all 9 action references are unpinned, weakening build reproducibility and update integrity.