ernestdefoe/backdrop

Profile covers for Flarum 2: upload, drag to frame, zoom. On profiles, hover cards and the member directory, without patching anything other extensions rely on.

Latest 1.0.1

Packagist

72%

Total Score

caution

Only two releases exist, so the package has little track record despite a matching, recently updated repository.

Health Score Breakdown

Project backing

The registry package and repository are owned by the same individual account, providing consistent ownership but no organization-level backing or broader maintenance capacity.

Release history

This package is newly published, with only two releases on the same day and no established release history. That limits evidence of sustained maintenance, though the recent 1.0.1 release shows active initial development.

Security policy

The repository has no security policy. That is a transparency gap for a package handling profile uploads, although the project is very new and other repository signals are available.

Workflow audit

All six analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, high-severity findings, or incomplete workflow analysis, limiting this to a hygiene concern.