compwright/php-os-release

Release historycaution

This is the only release, published 409 days ago, with no releases in the last 12 months; that limits evidence of ongoing maintenance but does not by itself indicate abandonment for a small focused library.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, consistent with a one-release project but leaving little evidence of current maintenance capacity.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security-scanning tool was detected; this is a modest transparency gap for a maintained library.

Security policycaution

No security policy is present, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

Both workflows were fully analyzed with no unsafe-trigger or high-confidence audit findings, but all 3 action references are unpinned and one workflow grants top-level write permissions. These are build-hygiene cautions rather than severe risks because no untrusted checkout or injection sink was found.