hbenabdallah/phpgraph

Release historycaution

The package is less than 1 day old, with five releases arriving about 1 hour 16 minutes apart. Rapid initial releases show activity but provide almost no evidence of sustained maintenance.

Repo commit activitycaution

No commits or active maintainers were recorded in the last 3 months, but the repository was pushed less than 1 day ago and the package itself is less than 1 day old, making the longer-window measure inconclusive.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a modest transparency gap for a tool intended to be used in development environments.

Version stabilitycaution

Version v0.1.4 is not a stable-major release, so its 0.x status signals an early-stage API and maturity profile rather than an established dependency.

Workflow auditcaution

The audit found no high-confidence workflow findings or untrusted checkout and script-injection paths. However, all 11 action references are unpinned and one workflow has top-level write permissions, creating avoidable maintenance and token-scope risk.