ernestdefoe/flarum-facebook-post

Maintainerscaution

Only one registry account can publish releases, which creates publishing concentration. Repository activity from two contributors partly offsets the maintenance concern, but not the registry access concentration.

Project backingcaution

The repository is owned by the same individual namespace as the package and is user-owned rather than organization-owned. This matches the single registry maintainer and provides no organizational handoff evidence.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is limited supporting evidence for adoption and review, but the package is young and active, so it does not outweigh the maintenance signals.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and hygiene gap rather than a standalone severe risk.

Security policycaution

The repository has no security policy, leaving no documented process for reporting vulnerabilities or coordinating fixes.