tobimori/kirby-thumbhash

Maintainerscaution

Only one account has registry publishing access. The matching repository and ongoing release history provide some compensation, but a single maintainer leaves limited continuity if that person becomes unavailable.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which reduces evidence of ongoing development, although the recent release and repository push partly compensate.

Repo toolingcaution

The repository uses Composer, but no security scanning tool is configured. The missing scan is a modest transparency gap rather than a severe concern for this small PHP plugin.

Security policycaution

The repository has no published security policy, leaving no clear process for reporting vulnerabilities or receiving security guidance.