softrang/image-helper

Maintainerscaution

Only one registry maintainer account is listed, which leaves limited observable publishing redundancy. The repository is also user-owned rather than organization-backed, so there is no provided evidence of a broader maintenance team.

Release historycaution

All seven releases occurred during a brief burst on 15 October 2025, with no later release activity despite the package being about 341 days old. This is a meaningful maintenance concern for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the one-day release burst, this supports a concern about stalled maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool is configured. The missing scanning is a hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a small image-handling library this reduces vulnerability-reporting transparency, though it is not severe on its own.