vipertecpro/image-cropper

Project backingcaution

The registry and repository are owned by the same individual account, so ownership is clear, though it does not provide organization-level maintenance depth.

Release historycaution

Six releases in the last 12 months and a package age of 57 days show active early development, although the short history leaves long-term maintenance unproven.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest assurance gap.

Security policycaution

The repository has no security policy, which weakens transparency around vulnerability reporting and response.

Workflow auditcaution

The only workflow was fully analyzed with no audit findings or untrusted checkout paths, but both action references are unpinned, reducing build reproducibility and supply-chain assurance.