novactive/ezcloudinarybundle

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a severe dependency risk rather than a cosmetic metadata gap.

Release historydanger

The package has only one release, version 1.0.0, published about six years ago, with no releases in the last 12 months. That strongly indicates abandonment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, there is no observed recent development activity.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, though it is secondary to the package's abandonment status.

Workflow auditcaution

Both analyzed workflows use unpinned actions, so their exact action revisions are not fixed. The audit found no dangerous triggers, untrusted checkouts, or other reported findings, which keeps this as a hygiene concern.