imdong/flarum-ext-spam-alert

Release historydanger

This is the package's only release, published about 2 years and 11 months ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the package having stopped receiving updates. The repository is not archived, but there is no recent activity to offset the concern.

Repo toolingcaution

The project uses Composer for builds, but no security-scanning tools were detected. For a small extension this is a modest transparency and maintenance gap rather than evidence of unfitness.

Workflow auditcaution

Both workflows were analyzed successfully and contain no detected dangerous sinks or audit findings, but both use unpinned actions. This is a real build-reproducibility and supply-chain hygiene gap, though not severe on its own.