halimjr/asset-minifier-bundle

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Together with the recent release burst, this is a meaningful maintenance slowdown.

Maintainerscaution

One registry account publishes the package. That is a modest publishing base for a user-owned project, but the repository and package ownership match, so it is not an unexplained maintainer mismatch.

Release historycaution

Nine releases were published in the last 12 months, but they were concentrated in a very short burst, with a median interval of about 26 minutes. This suggests limited evidence of sustained release cadence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a hygiene gap rather than evidence that the package is unsafe or abandoned.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted-trigger sinks, and it has no top-level write permissions. However, both of its two action references are unpinned, leaving the CI supply chain less reproducible.