keyagency/statamic-asset-usage

Release historycaution

The package is only 60 days old but has 13 releases, showing strong recent activity; the short history limits evidence of long-term maturity.

Repo bus factorcaution

All 15 commits in the last three months came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The audit covered both workflows and found no dangerous triggers or high-confidence findings, but all 8 action references are unpinned, weakening build reproducibility and supply-chain hygiene.