bzrk/php-stream

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are configured. The missing scanning is a modest repository hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For a small library this is a transparency and reporting gap, though it is not by itself evidence that the code is unsafe.

Workflow auditcaution

All one analyzed workflow completed successfully without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its two action references are unpinned, leaving them exposed to upstream reference changes.