barryvdh/reflection-docblock

Release historycaution

The package has existed for about 13 years with 28 releases, but only one release occurred in the last 12 months, indicating a low release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent push and release partly offset this, but ongoing maintenance activity is currently thin.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

No repository security policy was found, reducing the clarity of vulnerability reporting and maintenance expectations.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both of its two action references are unpinned, which weakens build reproducibility.