inesta/php-schemas

Lifecycle scriptscaution

The package runs a post-autoload-dump script during installation. This is a modest transparency and installation-risk concern because package installation executes project-provided code.

Release historycaution

This is the only release, published 474 days ago, with no releases in the last 12 months. That leaves little evidence of sustained maintenance despite the repository remaining available.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with the single-release history, this is meaningful evidence of inactivity.

Version stabilitycaution

Version 0.1.0 is not a stable major release, so the public API may still change and the project has limited maturity evidence.

Workflow auditcaution

Both workflows were fully analyzed with no audit findings or untrusted checkouts, but all 15 action references are unpinned and one workflow grants top-level write access. These are hygiene and reproducibility concerns, not severe risks on their own.