xefi/faker-php-images

Release historycaution

Only two releases exist, with none in the last 12 months and the latest released about 21 months ago. This is partly offset by the repository being pushed more recently, but release maintenance remains a concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent push date is reassuring, but the current activity still suggests limited ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented for a package that is intended to be integrated as a library.

Workflow auditcaution

Both workflows were fully analyzed with no reported audit findings or untrusted checkout and injection sinks. However, all five action references are unpinned, which weakens build reproducibility and supply-chain hygiene.