edumarques/dynamophp

Release historydanger

The package has made no release in over a year, despite six releases concentrated in its first few weeks. That strongly raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history concern and suggesting maintenance has stalled.

Workflow auditdanger

The audit found a high-confidence template-injection issue in pr.yml, which can expand attacker-controlled input into code. All six action references are unpinned; the workflows have no top-level permissions block, but no broad top-level writes were found.

Maintainerscaution

One registry publishing account means limited publishing redundancy, although the repository is owned by the same individual and the count reflects access rather than actual activity.

Project backingcaution

The repository is owned by an individual rather than an organization, so there is limited evidence of institutional maintenance capacity.