coduo/php-humanizer

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts, which warrant awareness because they execute during dependency operations; this signal provides no evidence that they are dangerous.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push partly compensate, but this is a meaningful maintenance-risk signal.

Repo issue activitycaution

There are no open issues or pull requests and no activity in the last month. This may reflect project stability, but it provides little evidence of ongoing community interaction.

Security policycaution

No SECURITY.md or equivalent security policy was found. This is a transparency gap, although Dependabot scanning and the absence of dangerous workflow patterns provide some compensating hygiene.

Token permissionscaution

All six workflows lack top-level token permissions declarations, so least-privilege intent is not explicit; none declares top-level write access, limiting the severity.