eventviva/php-image-resize

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no distinct replacement identified. That is a severe adoption risk even though the linked repository remains active.

Release historycaution

The package has 32 releases since March 2014, but its latest registry release was in December 2021 and it has had no releases in the last 12 months. This leaves the published dependency substantially behind the repository activity.

Repo bus factorcaution

All 6 recent commits came from one contributor, giving the project a concentrated maintenance base. Organization backing provides some continuity, but no second recent contributor is shown.

Security policycaution

No repository security policy was found. That weakens vulnerability-reporting transparency, although it is secondary to the package-level abandonment status.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-confidence audit findings, but all 4 action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned references remain a mild supply-chain hygiene gap.