wrav/oembed

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This is concerning alongside the project's stated search for a new maintainer, despite the recent release.

Maintainerscaution

Only one account has registry publishing access, which creates continuity risk. The organization-owned project backing makes a short registry maintainer list less concerning than it would be for an ownerless project, but does not remove the single-publisher dependency.

Security policycaution

The repository has no security policy. For a plugin that processes external media URLs and recently addressed injection-related issues, the lack of a documented reporting process is a meaningful transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 9 action references are unpinned. That leaves avoidable build reproducibility and action-substitution risk.