naas/php-initial-avatar-generator

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, which is the clearest sign that maintenance may have stalled after the initial release.

Dependency profilecaution

Seven runtime dependencies, including image processing, initials, script-language, SVG, and transliteration libraries, create meaningful transitive maintenance exposure for a small package, though the dependencies fit its stated functionality.

Release historycaution

There has been only one release, published about 195 days ago, so there is little release history to demonstrate sustained maintenance or compatibility tracking.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and assurance gap rather than evidence that the package is unfit by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This lowers transparency for a dependency, although the package is not deprecated or archived.