technikermathe/blade-lucide-icons

Repo bus factorcaution

One contributor made 100% of the 58 recent commits, leaving no demonstrated backup maintainer in the observed period and increasing abandonment risk.

Repo commit activitycaution

The repository recorded 58 commits in the last 3 months, showing active maintenance, but all were made by one active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and detection gap, not evidence of a security failure.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

All four workflows were analyzed with no detected audit findings or untrusted checkout and script-injection sinks. However, all eight action references are unpinned and two workflows grant top-level write permissions, creating reproducibility and token-scope hygiene concerns.