graham-campbell/security

Registry deprecationdanger

Packagist marks the entire package as abandoned and recommends voku/anti-xss, which is a severe adoption and support risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the lack of ongoing maintenance.

Repository archiveddanger

The linked repository is archived, despite being pushed on March 2, 2025; archived status indicates the project is no longer actively maintained.

Release historycaution

The package has 46 releases over more than 13 years, but none in the 12 months before collection, indicating a stopped release cadence.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings, but all 7 action references are unpinned, leaving a reproducibility and workflow-hygiene gap.