donatello-za/rake-php-plus

Release historycaution

The package has 23 releases since September 2016, but there were no releases in the 12 months before the February 2025 latest release. This indicates a mature history with currently slow maintenance.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with an extended pause since the latest release. That raises abandonment and maintenance-risk concerns.

Security policycaution

The linked repository has no security policy. For a library intended for integration into applications, this is a modest transparency and vulnerability-reporting gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts or script injection, but all 3 action references are unpinned. The reported low-confidence cache-poisoning finding is hygiene rather than a standalone severe risk.