bassim/super-expressive-php

Project backingcaution

The registry namespace and repository belong to the same individual account, so ownership is consistent, though it does not provide organizational redundancy.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance slowdown despite the recent release and push.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, all six action references are unpinned, weakening build reproducibility and workflow supply-chain hygiene.