pixelandtonic/imagine

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. This is a maintenance caution, although the package released recently and has an established release history.

Repo toolingcaution

The repository uses Composer build tooling and has no detected security scanning tools. The missing scanning is a transparency gap, but it is partly offset by the presence of a security policy and safe workflow analysis.

Token permissionscaution

Both workflows omit top-level token permissions, so their effective permissions are less explicit than recommended. No workflow requests top-level write access, limiting the concern.