rosell-dk/image-mime-type-sniffer

Release historycaution

The package has had no release in more than four years: its latest release was on April 20, 2022, with zero releases in the last 12 months. This materially raises maintenance and abandonment concerns.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates weak current maintenance capacity.

Repo toolingcaution

The repository uses Composer, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe concern for this small library.

Security policycaution

The repository has no security policy, leaving no documented route for reporting vulnerabilities or describing security response expectations.

Workflow auditcaution

All six workflows use read-only permissions and the audit found no injection or other findings, which is positive. However, all 16 analyzed action references are unpinned, leaving avoidable workflow supply-chain exposure.