liberusoftware/identity-socialstream

Release historycaution

The package is young at 49 days, but it has 11 releases in that period, indicating active development rather than abandonment. The very short median interval suggests a still-settling project, so this is a minor caution.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is reported. This is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This lowers transparency but does not by itself indicate abandonment.

Workflow auditcaution

All three workflows were analyzed successfully with no injection or high-confidence audit findings, and none uses top-level write permissions. However, all 3 of 3 analyzed action references are unpinned, which is a workflow supply-chain hygiene gap.