gutocf/image-upload

Release historydanger

The package has 16 releases since September 2020, but none in the last four years; the long release gap is a meaningful abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with roughly four years without a release and weakening maintenance confidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool is reported; this is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving users without a documented reporting process; this matters for an upload-handling library.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but all three action references are unpinned, reducing build reproducibility.