codeat3/blade-prime-icons

Release historycaution

The package has existed for about five years with nine releases, but only one release in the last year and a latest release about six months ago indicate a slow cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. That suggests currently quiet maintenance and raises the risk that fixes may be slow, even though the repository was pushed more recently.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. The missing scanning is a modest transparency and maintenance weakness.

Security policycaution

The repository has no security policy. For a small icon package this is not severe, but it leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 13 analyzed action references are unpinned, which weakens build reproducibility and exposes workflows to upstream action changes. The audit found no untrusted checkout, script injection, dangerous trigger, or write-permission finding, limiting the impact to caution.