mentosmenno2/image-crop-positioner

Lifecycle scriptscaution

The package declares post-install-cmd and post-update-cmd scripts, which increase installation-time execution exposure and deserve caution when adopting the dependency.

Maintainerscaution

Only one registry publishing account is listed, limiting publishing continuity if that individual becomes unavailable. The linked repository is also owned by a user account rather than an organization.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, indicating a recent pause in development and raising maintenance risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving automated security coverage limited.

Security policycaution

The repository has no security policy, so it provides no documented channel or process for reporting and handling vulnerabilities.