innoweb/silverstripe-social-metadata

Dependency profilecaution

The package declares eight runtime dependencies, including several Silverstripe-specific extensions. This is a meaningful integration surface and increases dependency maintenance burden, but it is not inherently unhealthy.

Maintainerscaution

Only one registry account has publishing access, leaving little redundancy if that maintainer becomes unavailable. The strong release history partly compensates, but the narrow publishing base remains a maintenance risk.

Project backingcaution

The registry namespace is organizationally named, but the linked repository is owned by an individual account rather than an organization. This provides limited backing redundancy and reinforces the single-maintainer concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Although the registry shows frequent releases, this makes current development capacity and future maintenance less certain.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present. The missing scanning is a transparency gap, though it does not by itself indicate an unsafe dependency.