codeat3/blade-phosphor-icons

Release historycaution

The package has existed since May 2021 and released version 2.4.0 recently, but only one release arrived in the last 12 months with a median interval of about 131 days. This indicates a maintained but relatively slow cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although a recent release and push provide some compensation, the short-term activity gap raises maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For an icon resource package this is a modest transparency gap rather than a severe adoption blocker.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

All four workflows were analyzed successfully with no high-confidence audit findings or dangerous untrusted triggers. However, all 13 action references are unpinned, which weakens build reproducibility and supply-chain control.