plaisio/web-assets-core

Release historycaution

The package has 20 releases since 2019, but none in the last 12 months; its latest release was over 15 months before collection. This is meaningful evidence of slowing maintenance despite a historically regular cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the lack of releases over the last year. This raises the risk that maintenance has slowed or stopped.

Repo toolingcaution

The repository uses Composer and Phing, showing an established build process, but no security-scanning tools were detected. The missing scanning is a modest transparency and hygiene gap.

Security policycaution

No repository security policy was found. For a small library this is not severe, but it leaves vulnerability reporting expectations undocumented.

Workflow auditcaution

The sole workflow uses read-only permissions and has no dangerous audit findings, but all four analyzed action references are unpinned. The complete audit limits the concern to reproducibility and action-update hygiene.