fopost/social-core

Release historycaution

Only two releases have been published over 215 days, with a median interval of about 189 days; this is limited evidence of sustained release maintenance.

Repo bus factorcaution

One contributor made all 10 recent commits, creating a meaningful continuity risk; organization ownership provides some handoff capacity but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a transparency and maintenance gap for a package handling publishing integrations.

Workflow auditcaution

The audit completed cleanly with no untrusted checkout or script-injection findings, but all five action references are unpinned and one workflow grants top-level write permissions, creating moderate workflow hygiene risk.