chongyi/php-basen

Release historycaution

The package has only two releases, both published on the same day, and none in the last 12 months. This limited history reduces evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, despite being collected more than a year after the last push. That is a meaningful maintenance concern.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This is a transparency gap, though it does not by itself make the package unfit.

Workflow auditcaution

The single workflow was fully analyzed with no detected dangerous findings, but both referenced actions are unpinned. This creates a modest reproducibility and supply-chain hygiene concern.