revolution/socialite-mastodon

Release historycaution

The package has 27 releases over roughly 9 years, but none in the last 12 months; that recent slowdown raises maintenance concern despite the long release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a meaningful maintenance warning even with a recent repository push and an earlier release history.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations and response guidance unclear.

Workflow auditcaution

All 7 analyzed action references are unpinned, and two workflows grant top-level write permissions; the audit found no untrusted checkouts or script injection, so this is a CI hygiene caution rather than a severe risk.