simonvomeyser/laravel-glide-images

Maintainerscaution

Only one registry maintainer is listed. With a user-owned repository and no organizational backing shown, continuity depends heavily on one person.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. This is a meaningful maintenance concern despite the newer registry release.

Security policycaution

No security policy was found. For a package that processes local and remote images, the absence reduces vulnerability-reporting transparency.

Version stabilitycaution

Version 0.1.1 is not a stable major release, and the project documentation says the API may change considerably before 1.0. Developers should expect compatibility changes.

Workflow auditcaution

All 9 action references are unpinned, and the audit found a high-confidence bot-condition issue in a pull_request_target workflow; two workflows also grant top-level write access. No untrusted checkout or script-injection sink was found, so this is workflow hygiene and supply-chain caution rather than a severe verdict.