env-interop/impl

Release historycaution

The package is only 151 days old with two releases, spaced about 72 days apart, so long-term maintenance stability is not yet well established.

Repo bus factorcaution

One contributor made all seven recent commits, leaving a fragile individual bus factor; organizational backing provides some handoff capacity but does not remove the concentration.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but all three action references are unpinned, weakening build reproducibility and update control.