dieselfox1/phpcompatibility-fin

Project backingcaution

The package and repository are owned by the same individual account, so the source linkage is coherent, but there is no organizational backing shown to broaden maintenance capacity.

Release historycaution

The package has 10 releases but none in the last 12 months, despite being about 1 year old; this suggests maintenance may have slowed, though the project is still relatively young.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, reinforcing the release-history concern and indicating currently limited maintenance activity.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent for users.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-confidence audit findings and no untrusted checkout or script-injection patterns. However, all 5 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.