code711/mastodon-feed

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided; this is a severe adoption risk even though the specific release is not separately withdrawn.

Release historycaution

The package has four releases, but none in the last 12 months and the latest registry release was on January 4, 2024, indicating a long release gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the repository not being archived.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented; this adds a transparency gap for a web plugin.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers or findings, but both analyzed actions are unpinned, leaving avoidable build reproducibility and action-integrity risk.