ecphp/php-conventions

Release historycaution

The package has only four releases and none in the last 12 months; its latest release was about 18 months ago. This reduces confidence that compatibility and maintenance needs are being addressed promptly.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the lack of recent releases, this is a meaningful maintenance warning, though not evidence of abandonment by itself.

Security policycaution

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but the package's quality tooling provides some compensating evidence.

Token permissionscaution

All four workflows lack top-level token permission declarations. No workflow requests top-level write access, which limits the concern, but explicitly restricting permissions would provide stronger workflow hygiene.