benhall14/php-calendar

Project backingcaution

The registry and repository are owned by the same individual, so the ownership relationship is clear, though it does not provide organizational redundancy.

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months, which weakens evidence of active maintenance and raises abandonment risk.

Security policycaution

The repository has no published security policy, leaving reporting and response expectations unclear for a package used in applications.

Workflow auditcaution

All 8 action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in the PHP CS Fixer workflow. The workflows have no untrusted triggers or script-injection findings, which limits the concern to build reproducibility and action hygiene.