hofff/contao-facebook-pixel

Release historycaution

The package has 11 releases over about nine years but none in the last 12 months, indicating a notably slow release cadence for a maintained extension.

Repo commit activitycaution

There were no commits from active maintainers in the last three months, which weakens evidence of ongoing maintenance even though the repository was recently pushed.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting expectations unclear; this is a modest transparency gap rather than evidence of abandonment.

Workflow auditcaution

All six analyzed action references are unpinned, and the audit found a high-confidence unsound condition in the sole workflow. The workflow has no untrusted checkout or script-injection path, so this is a hygiene concern rather than a severe supply-chain risk.