craftcms/azure-blob

Dependency profilecaution

The package has four runtime dependencies, including Craft CMS and Flysystem integrations; this is a focused but nontrivial dependency surface for a storage plugin.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance warning, although the release history and May 2026 push show recent project activity outside that window.

Repo issue activitycaution

There are only two open issues and one open pull request, but none were opened or merged in the last month, providing limited evidence of current community activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

All three workflows were analyzed with no detected dangerous sinks or audit findings, and one workflow scopes permissions at job level while another is read-only. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.