codeat3/blade-humbleicons

Release historycaution

Only three releases have been published across about 28 months, with one release in the last 12 months. The latest release is recent, so this indicates a slow cadence rather than abandonment.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. For a small package this is a meaningful maintenance concern, though the repository was pushed recently enough not to indicate clear abandonment.

Repo toolingcaution

Composer is used for the build, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four workflows were analyzed successfully and have no detected injection or untrusted-checkout findings. However, all 13 action references are unpinned, which weakens build reproducibility and supply-chain hygiene; the absence of top-level permissions is neutral on its own.