henset11/image-optimizer

Release historydanger

This is the only registry release, published about 1 year and 23 days ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance for a package tied to a changing framework.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since the only release. This is strong evidence of limited current maintenance.

Lifecycle scriptscaution

The package runs a post-autoload-dump install-time script. This adds supply-chain and installation complexity, though the signal does not show that the script is unsafe.

Workflow auditcaution

All 7 action references are unpinned, and all three workflows grant top-level write permissions; the audit also found a high-confidence bot-condition issue. No untrusted checkout or script-injection sink was found, so this is a hygiene concern rather than a severe workflow risk.