get-skipper/skipper-php

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance despite the recent release history.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The workflow audit completed successfully and found no dangerous sinks or audit findings, but all 6 action references are unpinned, reducing build reproducibility and supply-chain assurance.