3lvir4/php-range

Release historycaution

The latest release was in March 2024, with no releases in the past 12 months despite the package being nearly three years old. This is meaningful maintenance concern for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which supports the concern that development has slowed.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, though the small library's clean workflow audit and limited scope reduce its practical weight.

Version stabilitycaution

Version v0.2.0 is a stable, non-prerelease release, but it remains below major version 1 and should be expected to have a less settled API.

Workflow auditcaution

The workflow audit completed cleanly and reports read-only permissions with no dangerous findings, but all four action references are unpinned, leaving avoidable reproducibility and action-substitution exposure.