datlechin/flarum-who-replied

Release historycaution

This is a 1,742-day-old package with only one release and no releases in the last 12 months. That limited history and lack of ongoing releases materially increase abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the single-release history, this is meaningful evidence of weak current maintenance.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and hygiene gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy. This weakens disclosure transparency, though it is less significant for a small extension than the maintenance gaps.

Workflow auditcaution

Both analyzed workflows completed the audit without findings or dangerous triggers, but all 2 of 2 action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.