siteation/magento2-hyva-icons-feather

Release historycaution

The package has existed since November 2021 with five releases, but has had no release in the last 12 months; the latest release was November 30, 2024. This lowers confidence in current maintenance, though the package may be stable.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the lack of releases in the last year, this is meaningful evidence of currently quiet maintenance.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, though the package's small, focused scope limits its weight.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, which leaves avoidable workflow supply-chain exposure; the absence of a top-level permissions block is acceptable here because there is no top-level write access.