hofff/contao-social-tags

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of slowed maintenance for a current release line.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while three issues and two pull requests remain open; this suggests limited recent project response.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap, though dependency scanning provides some compensating security practice.

Workflow auditcaution

The single workflow was fully analyzed, but all five action references are unpinned and a high-confidence audit found a condition that always evaluates to true. No untrusted checkout, injection, or broad top-level write permission was detected, so this is a hygiene and reliability concern rather than a severe supply-chain finding.