budry/php-open-graph

Release historydanger

This is the package's only release, published over four years ago, with no releases in the last 12 months. That leaves current compatibility and maintenance uncertain.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long period without a new release.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tooling is present. This reduces automated oversight of dependency and code risks.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap.

Workflow auditcaution

The single workflow was fully analyzed with no detected dangerous sinks or audit findings, but both action references are unpinned. The missing top-level permissions block is acceptable on its own.