stubbles/image

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, despite the recent package release and repository push.

Repo popularitycaution

The repository has 1 star, 1 fork, and no watchers. Low popularity is supporting caution about external validation, but it does not outweigh the package's other evidence by itself.

Security policycaution

The repository has no published security policy. This weakens vulnerability-reporting transparency, though it is a hygiene gap rather than evidence of unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, leaving them exposed to upstream changes.