georgeff/problem

Maintainerscaution

One registry maintainer is responsible for publishing the package, which is a thin operational base for a library with little release history.

Release historycaution

Only one release exists, published about 208 days ago, so there is little evidence of sustained maintenance or release follow-through.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is reported, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, weakening build reproducibility and supply-chain hygiene.