zeroseven/pictureino

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance despite a recent push and release history.

Repo popularitycaution

Six stars and three forks indicate a small user and contributor community, so there is limited outside review and resilience if the primary maintainer stops contributing. This is a caution for confidence, not evidence that a small package is unhealthy by itself.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. The missing scanner is a maintenance and assurance gap rather than a severe risk on its own.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The only workflow was fully analyzed without dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, so their contents can change without a repository change.