glaivepro/image

Repo bus factorcaution

All 13 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving maintenance dependent on a single individual.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented for a package that processes image inputs and serves generated files.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 5 referenced actions are unpinned, weakening build reproducibility and supply-chain protection.