fof/share-social

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Three merged pull requests provide some compensation, but the direct commit signal still suggests a thin or recently paused maintenance pattern.

Repo toolingcaution

The project uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a release-blocking concern.

Workflow auditcaution

All three workflows were analyzed successfully with no high-confidence findings, dangerous triggers, untrusted checkouts, or script injections. However, all 3 of 3 action references are unpinned, which leaves workflow dependencies exposed to upstream changes.