spatie/statamic-responsive-images

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The recent release and push provide some compensation, but the short-term activity gap is still a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no SECURITY.md or other detected security policy, which leaves vulnerability reporting and response expectations unclear.

Workflow auditcaution

All four workflows were analyzed without untrusted triggers or script injection, but all 9 action references are unpinned and a high-confidence audit finding identifies an unpinned container image. This weakens build reproducibility and workflow supply-chain hygiene.