su-sws/stanford_events

Release historydanger

The package has made 32 releases since June 2020, but none in the last 12 months; its latest release was about 4 years and 2 months ago. This materially raises abandonment risk despite its previously regular release cadence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last 3 months, consistent with the long release pause. This is a significant maintenance concern, though the repository is not archived and is organization-owned.

Dependency profilecaution

The module declares 30 runtime dependencies, which is substantial and increases upgrade coordination and transitive maintenance exposure. This is plausible for a feature-rich Drupal module but still adds adoption overhead.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is partly offset by the repository's documented structure and organizational ownership.

Workflow auditcaution

All 6 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, so this remains a hygiene concern rather than a severe workflow risk.