afrux/online-users-widget

Release historycaution

The package has 10 releases since August 2021, but none in the last 12 months and the latest release was about 20 months before collection. This indicates a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the long release gap, this raises ongoing maintenance risk.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. That is a transparency and hygiene gap, not evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This modestly reduces project transparency.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all three action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.