coduo/php-to-string

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the January push and December release provide some recent evidence, the current pause lowers confidence in ongoing maintenance.

Security policycaution

The repository has no security policy. This is a modest transparency gap for reporting vulnerabilities, though it is partly offset by Dependabot-based security scanning.

Workflow auditcaution

All seven workflows were analyzed with no untrusted checkout or script-injection sink, so the findings are hygiene concerns rather than an immediate severe risk. However, all seven action references are unpinned, several workflows use floating latest container images, and one workflow has top-level write permissions.