goalgorilla/open_social

Dependency profilecaution

The package declares 108 runtime dependencies and no dev dependencies, creating a broad transitive maintenance and update surface even though this is consistent with a full Drupal distribution.

Lifecycle scriptscaution

A post-install-cmd script executes during installation, adding supply-chain and reproducibility exposure that should be reviewed before adoption.

Repo issue activitycaution

There were no new or closed issues in the last month, and one new pull request was not merged; this is a modest activity concern, although commit activity provides compensating evidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a security-hygiene gap in the repository.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.