czproject/phpcli

Release historycaution

The package is mature, with 17 releases since 2013, but it has had no release in over a year despite a typical interval of about 5 months. This indicates slowed maintenance rather than abandonment on its own.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The June 2025 release shows the project was recently updated, but current maintenance capacity is uncertain.

Security policycaution

The repository has no published security policy. This weakens vulnerability-reporting transparency, although it is a smaller concern for a compact CLI library than evidence of abandonment would be.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, or high-severity findings, but all 4 action references are unpinned. That is a concrete reproducibility and supply-chain hygiene gap.