faguvenli/asset-cdn

Release historycaution

The package has only 3 releases over about 3 years, with one release in the last 12 months and a median interval of about 579 days. The release made today shows activity, but the overall cadence remains sparse.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although it was pushed alongside the current release, there is little recent development activity to demonstrate ongoing maintenance.

Repo toolingcaution

Composer is used as the build tool, which fits the package, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens the project's disclosure and response transparency, though it is not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings and no untrusted checkout or script-injection paths, but all 4 action references are unpinned. That leaves build inputs less reproducible and less resistant to upstream action changes.