ianm/top-posters-widget

Release historycaution

The package has four releases since September 2024, but none in the last 12 months and the latest release was in January 2025. That makes ongoing maintenance less certain.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Combined with the older latest release, this points to reduced maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and hygiene gap rather than evidence of unsafe behavior.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations undocumented. This is a maintenance and transparency gap, but not a severe risk on its own.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all five action references are unpinned, reducing build reproducibility and increasing dependence on moving action versions.