conlect/image-iiif

Release historycaution

The package has eight releases since 2018 but none in the last 12 months, which indicates a meaningful release pause. The repository was pushed recently, partly offsetting abandonment concerns.

Repo commit activitycaution

There were no commits and no active maintainers in the three-month activity window, weakening evidence of current maintenance despite the later recorded repository push.

Repo issue activitycaution

There are no open issues and four open pull requests, but no issues or pull requests were merged in the last month, providing limited evidence of active response.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All five analyzed action references are unpinned, and high-confidence findings identify spoofable bot conditions and an unpinned container image. A pull_request_target workflow and broad permissions add context, though no untrusted checkout or script injection was found.