azjezz/psl

Registry deprecationdanger

Packagist marks the package abandoned at package scope, although the listed replacement is the same package and the release history shows current publication activity. This is a substantial adoption and continuity warning rather than proof that the code is unfit.

Workflow auditcaution

All 13 workflows were analyzed, but ten actions use unpinned tools and high-confidence findings grant blanket GitHub App permissions in three workflows. High-confidence template-injection findings are also present, though no pull_request_target, workflow_run, or untrusted checkout trigger was reported.