endroid/image-placeholder

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating a recent maintenance lull.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All five analyzed action references are unpinned, which weakens build reproducibility. The workflow has no untrusted checkout or script-injection findings, and no top-level write permissions were detected.