dshovchko/flarum-avif-support

Release historycaution

This is the package's only release, published about 10 months ago, so there is little evidence of an established maintenance cadence. Its clear release notes provide some transparency but do not offset the absence of follow-up releases.

Repo commit activitycaution

The repository has had no commits and no active maintainers in the past 3 months, consistent with a project that has not progressed since its first release. The package is small, but this still raises maintenance and abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a focused extension this is a modest assurance gap rather than a severe supply-chain concern.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. The clear README and small scope partly limit the impact, but do not provide a substitute for a reporting process.