prodrigestivill/gravatar

Release historycaution

The package is mature at about 6 years old with 8 releases, but only 1 release in the last 12 months and the latest release was about 4 months ago, indicating a modest cadence for a maintained plugin.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The recent release provides some counterweight, but the current inactivity is a maintenance concern.

Repo toolingcaution

Composer is used for the project build, but no security scanning tools are present. This is a transparency and maintenance gap, though not evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.