ernestdefoe/og-image

Package scaffoldingcaution

A substantial README documents the extension, but neither the artifact nor repository contains tests or a changelog. For a small extension this is a real maintenance-transparency gap, though the documentation partly compensates.

Project backingcaution

The registry namespace and repository are owned by the same individual, so ownership is clear, but there is no organizational backing shown to provide additional maintenance continuity.

Repo popularitycaution

The repository has only 1 star and no forks or watchers. This is weak supporting evidence, but popularity alone does not outweigh the recent releases and active commits.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools are present. The missing scanner is a hygiene gap rather than evidence of unmaintained code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This matters for a web-facing extension, although the active repository and clear README provide some compensating transparency.