brianhenryie/simple-php-code-parser

Dependency profilecaution

Seven runtime dependencies create a relatively broad update surface for a small parser, which adds some maintenance exposure, although the dependencies are directly relevant to its documented parsing and reflection features.

Project backingcaution

The repository is owned by an individual rather than an organization, so maintenance depends on a personal owner; the recent two-contributor activity partly compensates for that concentration.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and monitoring gap.

Security policycaution

The repository has no security policy, so there is no documented path for reporting vulnerabilities or explaining security handling.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, four of five action references are unpinned, which weakens build reproducibility.