appsignal/appsignal-php

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although the release history is recent, this is a meaningful maintenance warning for a young package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That leaves a repository hygiene gap, though it does not by itself indicate the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. Organization backing provides some context but does not replace a published process.

Version stabilitycaution

Version v0.5.2 is not a stable major release, so its API may still change. It is not marked as a prerelease, which partly offsets the early-version risk.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, which weakens build reproducibility and supply-chain hygiene.