gehrisandro/tailwind-merge-php

Release historycaution

The package has existed for about 3 years with six releases, but only one release in the last 12 months and a median interval of about 124 days indicate a modest cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The repository was pushed for this release, but the subsequent quiet period lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a transparency and detection gap.

Security policycaution

The repository has no security policy, so its process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

All six analyzed action references are unpinned, which weakens build reproducibility and exposes workflow behavior to upstream changes. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings.