athlon1600/php-cidr-range-optimizer

Release historycaution

The package has had three releases, but none in the past 12 months and the latest was about two years ago. This indicates a mature or abandoned project; the other signals show useful packaging quality but not ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the past three months, consistent with the last push being about two years ago. This raises maintenance and abandonment risk for future fixes.

Repo toolingcaution

Composer is used for the build, which fits the package, but no security scanning tool is configured. That is a modest transparency and maintenance gap rather than a severe risk.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both of its action references are unpinned. The workflow is therefore generally clean but has weaker supply-chain reproducibility.