traderinteractive/image-util

Release historycaution

The package has existed for over 8 years and has 16 releases, but it has had no registry release in the past year, indicating a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past 3 months, reinforcing the concern that maintenance has gone quiet after the latest release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities, though this is not a severe risk on its own.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both analyzed actions are unpinned, creating a minor reproducibility and action-integrity concern.