bytescommerce/easy-admin-file-upload-field

Release historycaution

The package has five releases over about 18 months, with two releases in the last 12 months and a latest release on November 30, 2025. This shows continued publishing but only moderate recent cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a concrete sign of currently slowed maintenance for a package with a relatively short history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence of unsafe behavior by itself.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. This is a real but limited concern for a small package.

Workflow auditcaution

The only workflow was fully analyzed with no trigger or audit findings, but all six action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own; the unpinned actions remain a supply-chain hygiene weakness.