codeat3/blade-codicons

Release historycaution

The package has 40 releases over about five years, but only one release in the last 12 months; this suggests a meaningful slowdown despite its established history.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a maintenance concern, although the repository was pushed within the last few months and the package recently released.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected; this is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for consumers.

Workflow auditcaution

All four workflows were analyzed without trigger or audit findings, and none grants top-level write access. However, all 13 action references are unpinned, so workflow dependencies can change without a reviewed version update.