benjamminf/craft-embedded-assets

Package scaffoldingcaution

The artifact includes a README and changelog, while the repository uses GitHub Releases, giving users documentation and release context. Tests are absent from both artifact and repository, leaving a maintenance-quality gap.

Repo toolingcaution

Composer is used as a build tool, providing basic build structure, but no security scanning tools are configured. The missing scanning lowers transparency somewhat without indicating abandonment.

Security policycaution

The repository has no security policy. This is a genuine disclosure-process gap, although it is partly offset by the package's active maintenance and clear source repository.