revolution/socialite-amazon

Release historycaution

The package has 14 releases since 2017 but none in the last 12 months; the latest release was nearly two years ago, which raises maintenance concerns despite a historically established release record.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a thin recent maintenance cadence.

Security policycaution

No security policy was found in the repository, leaving reporting and response expectations undocumented; this is a transparency gap rather than evidence the package is unsafe.

Workflow auditcaution

All 7 analyzed action references are unpinned, reducing build reproducibility, and two workflows grant top-level write permissions. The audit found no untrusted checkout, injection, or high-confidence security findings, which limits the severity.