el7cosmos/social_auth_discourse

Release historydanger

The package has had no release in more than five years: its latest release was in September 2021, with zero releases in the last 12 months. This is strong evidence of abandonment risk for a maintained integration.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but it shows no current maintenance activity.

Security policycaution

The linked repository has no security policy. That is a transparency and vulnerability-reporting gap, although the package's tests and simple scope provide some compensating project structure.

Workflow auditcaution

The single workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all five action references are unpinned and the audit found a high-confidence unpinned container image. This weakens build reproducibility and supply-chain hygiene.