adbario/php-dot-notation

Repo bus factorcaution

All 3 recent commits came from one contributor, leaving maintenance dependent on a single active person and increasing abandonment risk.

Repo toolingcaution

The project uses Make and Composer, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability-reporting and response expectations are not documented.

Workflow auditcaution

The workflow scopes permissions read-only, has no dangerous triggers or audit findings, and was fully analyzed. However, all 4 action references are unpinned, weakening build reproducibility and provenance.