zeggriim/yousign-webhook-bundle

Release historycaution

The package has six releases, but none in the last 12 months despite being about 435 days old. This weakens evidence of ongoing maintenance, although the recent repository push provides some counterweight.

Repo commit activitycaution

The repository records zero commits and zero active maintainers during the last 3 months. That is a meaningful maintenance concern, though the repository is not archived and was pushed recently.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerability reports should be handled. This is a minor concern rather than evidence of abandonment by itself.

Version stabilitycaution

Version v0.1.2 is not a stable major release, so compatibility and maturity remain less established. It is not marked as a prerelease, which modestly offsets the concern.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. However, both action references are unpinned, leaving the workflow exposed to changes in referenced actions.