randomhost/image

Release historycaution

The package has 10 releases since September 2016 but none in the last 12 months; its latest registry release was in February 2024, indicating a materially slowed maintenance cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the concern that development has stopped since February 2024.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only job permissions, with no untrusted checkout or script-injection paths. However, all 4 action references are unpinned, and the low-confidence cache-poisoning finding is a workflow hygiene concern.