efureev/php-type-normalizer

Release historycaution

The package has had no release in nearly two years, despite a previously regular median interval of about 28 days; this is a meaningful maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The package's tests and small dependency surface partly compensate, so this is a modest concern.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response. This is a hygiene gap, not evidence of a security incident.

Workflow auditcaution

All 5 of 5 analyzed action references are unpinned, leaving workflow dependencies exposed to unexpected changes. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, which limits the impact to caution.