booreiland/responsive-pics

Registry deprecationdanger

Packagist marks the entire package as abandoned and names clarifynl/responsive-pics as its replacement. That is a major adoption risk even though the linked repository remains active.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts. These require extra installation trust and review, although the signal does not show malicious behavior.

Release historycaution

The package has 73 releases since August 2019 and released once in the last 12 months, showing a long release history but a recently slow registry cadence.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tooling was detected. The build setup is present, while automated security coverage is not evidenced.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a maintained WordPress plugin.