sitegeist/iconoclasm

Release historycaution

The package has nine releases over roughly four years, but there have been no releases in the last 12 months and the latest release was about 20 months ago. That weakens evidence of ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. Combined with the long release gap, this is meaningful evidence of slowed maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing security automation is a maintenance and transparency gap, though not severe on its own.

Security policycaution

The repository has no security policy. For a package that integrates external image optimization tools, this leaves vulnerability-reporting expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both of its two action references are unpinned, which is a supply-chain hygiene weakness.