boson-php/uri

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a meaningful maintenance concern for a package developers may need to rely on over time.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

No security policy was found in the repository. That leaves vulnerability-reporting and response expectations unclear, which reduces transparency.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkout and injection sinks, but all 4 action references are unpinned. That creates avoidable workflow supply-chain drift, while the lack of a top-level permissions block is acceptable on its own.