ph-7/ph2gravatar

Release historycaution

The last registry release was about 4 years ago, with no releases in the past 12 months. This is meaningful evidence of stalled maintenance for a dependency, though the package may be stable because its scope is small.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the past 3 months, consistent with the long release gap. That leaves little evidence of current maintenance capacity.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling issues, although the package is small and no active security problem is shown here.

Workflow auditcaution

All 3 analyzed action references are unpinned, which weakens build reproducibility and action supply-chain hygiene. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings.