siteation/magento2-hyva-icons-bootstrap

Release historycaution

The package has seven releases since February 2022, but none in the last 12 months and the latest release was published in June 2025. This suggests slowing maintenance for a package tied to changing platform dependencies.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. With no releases in the last 12 months, this is evidence of a thin or currently paused maintenance cycle.

Security policycaution

No security policy is present in the repository. For a small icon module this is a transparency gap, although the package has no other provided signal indicating active security problems.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, leaving avoidable update and build-integrity risk; the missing top-level permissions block is acceptable on its own.