ez-php/idempotency

Release historycaution

The package is about one day old, with seven releases concentrated in that first day. This shows active initial iteration but provides little evidence of long-term maintenance or release stability.

Repo bus factorcaution

One contributor made all four recent commits, creating a concentrated maintenance path. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

Four commits in the last three months show recent activity, but all activity comes from the package's very recent launch and does not yet demonstrate sustained maintenance.

Security policycaution

The repository has no published security policy. That is a transparency gap for middleware handling request replay and stored responses, although it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed, has job-level permissions, and has no untrusted checkout or script-injection findings. However, all 8 referenced actions are unpinned, leaving the build exposed to upstream action changes.