dennisvandalen/shipment-url-parser-php

Project backingcaution

The package and repository are owned by the same individual account. This is coherent ownership, but it does not provide the organizational redundancy of a backed project.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Recent releases and a push within the last year provide some continuity, but the recent inactivity raises maintenance risk.

Repository archivedcaution

The repository is not archived and was pushed within the last year. However, the commit activity signal shows no commits in the last three months, so the repository's current maintenance pace is limited.

Workflow auditcaution

All four workflows were analyzed, but all eight action references are unpinned. The audit also found high-confidence bot-condition and unpinned-container-image issues; no untrusted checkout or script-injection sink was detected, so these are workflow hygiene concerns rather than a severe dependency risk.