gumlet/php-image-resize

Repo bus factorcaution

All six recent commits came from one contributor, so the technical bus factor is narrow. Organization backing provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, though the available security scanning partially offsets it.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, script injection, or audit findings, and it has no broad top-level write permission. However, all four action references are unpinned, leaving the build exposed to action changes over time.