godruoyi/php-snowflake

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent release partly offsets this, but the lack of observed development activity lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and handling expectations undocumented. Other project evidence supports maintenance, but does not replace that missing process.

Workflow auditcaution

All eight analyzed action references are unpinned, including high-confidence, high-severity unpinned container images in the codestyle and test workflows. The audit was complete and found no untrusted checkout or script-injection paths, which limits the concern to workflow hygiene.