intervention/image

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanning is a modest transparency and hygiene gap, not evidence of abandonment.

Security policycaution

The repository has no security policy. For a widely used image-processing library, this reduces vulnerability-reporting transparency, though active maintenance and release activity partly offset the gap.

Workflow auditcaution

The sole workflow is fully analyzed, uses read-only permissions, and has no injection or high-confidence audit findings. However, all five action references are unpinned, which weakens build reproducibility and workflow supply-chain hygiene.