deuteros-php/deuteros

Release historycaution

This is the package's first release, published 0 days ago, so there is no established release track record yet. Active repository work partly offsets the maturity gap but does not remove it.

Repo toolingcaution

Composer is used as the build tool, but no repository security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations unspecified for consumers.

Version stabilitycaution

Version 0.1.0 is not a stable major release, which signals an early API and project stage. The release is not marked as a prerelease, providing limited compensation.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted sinks, but all 6 action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene concern.