webcoast/deferred-image-processing

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the absence of current development activity lowers confidence in ongoing maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, despite six open issues and two open pull requests; this is a modest maintenance concern.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning automation is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout or script-injection trigger, but both action references are unpinned and the auditor found a high-confidence template-injection issue. Template injection is a workflow hygiene risk here, not a severe health verdict by itself.