fof/discussion-thumbnail

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, which is a maintenance concern, although the current release and one merged pull request in the last month provide some compensating evidence.

Repo toolingcaution

Composer build tooling is used, but no security scanning tools are reported, leaving a modest transparency and preventive-maintenance gap.

Workflow auditcaution

All 3 workflows were analyzed successfully with no reported sinks or audit findings, and none grants top-level write access. However, all 3 of 3 action references are unpinned, so workflow behavior is more exposed to upstream action changes.