event-engine/php-inspectio-graph

Release historycaution

The package has had no registry release for more than four years, despite seven releases overall; this is a meaningful sign of possible abandonment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and weakening confidence in ongoing maintenance.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerabilities should be reported; the package's tests, release notes, and source repository provide some compensating project evidence.

Workflow auditcaution

All nine analyzed action references are unpinned, leaving build behavior exposed to future upstream changes. The audit found no untrusted checkout, script injection, or high-severity workflow issue, which limits the concern to hygiene.