adlacruzes/php-ci-tools

Release historycaution

The package has had 26 releases since 2019, but its latest release was over four years ago and it had no releases in the last 12 months. That is a substantial maintenance concern, despite its previously regular release cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, with the last push over three years ago. The non-archived status provides limited compensation but does not show current maintenance.

Repo toolingcaution

The repository uses Composer for its build, which fits the PHP package, but no security-scanning tooling was detected. This is a transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The linked repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, although it is not by itself evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both action references are unpinned. This creates a modest reproducibility and supply-chain hygiene gap.