spatie/image-optimizer

Security policycaution

No security policy is published in the repository, which reduces vulnerability-reporting transparency, but this is a moderate hygiene gap rather than evidence of abandonment.

Workflow auditcaution

All four workflows were analyzed and no untrusted checkout or script-injection sink was found. However, the audit reports one high-confidence unpinned container image, and all eight action references are unpinned, leaving workflow inputs less reproducible.