sycho/flarum-move-posts

Release historycaution

The package has 10 releases over about five years, but none in the last 12 months and the latest release was in January 2025. That long release gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with no registry releases in the last year, this indicates currently inactive maintenance.

Security policycaution

The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, although it does not by itself show that the package is unsafe.

Version stabilitycaution

Version 0.2.0 is not a stable major release, but it is not marked as a prerelease and recent releases contain no prerelease versions. This is a modest maturity concern rather than a severe risk.

Workflow auditcaution

Both analyzed workflows use unpinned action references, so their build inputs can change without a repository change. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, which limits the concern to workflow hygiene.