composer-unused/symbol-parser

Name lookalikedanger

The package is reported to borrow the identity of composer/class-map-generator, which has far more monthly downloads; despite zero artifact overlap, this creates a serious risk that consumers wanted the established package instead.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which indicates currently quiet maintenance despite the recent package release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

The audit completed cleanly with no injection findings, but all six action references are unpinned, so workflow dependencies can change without a fixed revision.