fof/news-widget

Release historycaution

Only two releases have been published over about 160 days, with both released within roughly one day; this provides limited evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent release.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tooling was detected; the missing scanner is a minor transparency gap rather than a severe concern.

Version stabilitycaution

The assessed version is a beta release, so its API and behavior may still change and it has less stability evidence than a stable release.

Workflow auditcaution

All three workflows were analyzed with no high- or medium-severity findings and no untrusted checkout or script-injection paths. However, all three action references are unpinned, which is a supply-chain hygiene weakness.