devscast/tinify

Registry deprecationdanger

Packagist marks the entire package as abandoned, even though the listed replacement is the same package. This registry status is a severe adoption and support warning.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single active person. Organization ownership provides some handoff capacity but does not remove the concentration risk.

Repo commit activitycaution

There were two commits in the last 3 months, so maintenance is present but limited in volume.

Workflow auditcaution

All four workflows use read-only permissions and the audit completed fully, but all 11 action references are unpinned. The only reported cache-poisoning issue has low confidence, so it is a hygiene concern rather than a severe finding.