constructions-incongrues/flarum-lite-youtube

Release historycaution

The package is about 327 days old but has only two releases, both published within the same day, with no later release activity shown. This is a meaningful maturity and maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is the clearest abandonment concern, although the repository is not archived.

Repo issue activitycaution

Six open pull requests are visible, but none were opened or merged in the last month. This suggests some outstanding work without evidence of current throughput.

Security policycaution

The repository has no published security policy. This is a transparency gap, though it is less significant for a small extension with limited stated maintenance.

Token permissionscaution

Two workflows lack top-level token permissions and the release workflow grants top-level write access. The workflow scan found no dangerous execution patterns, but the broad permissions increase automation exposure.