babeuloula/assets-minify

Release historydanger

This is the package's only release, published 712 days ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern from its one-release history.

Repo toolingcaution

Make and Composer provide build tooling, but no security-scanning tools are configured. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The workflow audit completed fully and found no audit findings or untrusted execution paths. However, all 12 action references are unpinned, creating avoidable build reproducibility and action-supply-chain risk.