danog/php-rtc-sctp

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, which add execution during dependency operations and warrant review, though their presence alone is not evidence of poor maintenance.

Release historycaution

The package is only 58 days old but already has 31 releases, with releases arriving roughly every 72 minutes at the median. This shows active publishing but leaves limited evidence of long-term stability.

Repo bus factorcaution

Two contributors are active, but the leading contributor made about 69% of recent commits. The second contributor is substantial but the maintenance base remains concentrated.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or script-injection findings. All 3 action references are unpinned, leaving a workflow supply-chain hygiene gap.