dachcom-digital/social-data-youtube-connector

Release historycaution

There have been no releases in the past 12 months, and the latest release was about 21 months ago, indicating weak recent publishing activity. The four-release history shows an established package but does not offset the current gap.

Repo commit activitycaution

The repository recorded no commits and had no active maintainers in the past three months, which raises maintenance and abandonment concerns. This is partly offset by the repository having been pushed recently, as shown by repository_archived.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap, but it is not evidence that the package is unsafe on its own.

Workflow auditcaution

All 13 analyzed action references are unpinned, and one high-confidence medium-severity finding uses an archived action. The pull_request_target workflow has no untrusted checkout or script-injection sink, so this is workflow hygiene risk rather than a severe dependency risk.