ikromjon/nativephp-mobile-document-scanner

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although a recent release exists, the absence of observed commit activity is a meaningful maintenance concern.

Repo toolingcaution

The repository uses Composer but reports no security scanning tools. That is a transparency and maintenance gap, though it is not evidence that the package is unsafe.

Security policycaution

The repository has no published security policy. This weakens vulnerability-reporting transparency for a package that integrates native mobile capabilities.

Workflow auditcaution

The single analyzed workflow has no untrusted trigger or audit findings, but all four action references are unpinned. The incomplete pinning is a supply-chain hygiene gap, while the absent top-level permissions block is acceptable on its own.