accesibilidad-inclusion/pictogramas

Release historycaution

This is the only registry release, published nearly four years ago, with no releases in the last 12 months. That limits evidence of ongoing release maintenance, despite the repository showing some recent activity.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although this does not prove abandonment, it weakens the evidence that maintenance is currently active.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tooling was detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

No repository security policy was found. That reduces disclosure transparency, though it is not by itself evidence that the package is unsafe to depend on.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, leaving build inputs less reproducible and less resistant to upstream changes.