initphp/container

Release historycaution

The package has existed for about four years but only four releases, with a median interval of about 18 months and one release in the last 12 months. This indicates a slow maintenance cadence, though the latest release is recent enough to avoid an abandonment verdict.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a maintenance concern, although the recent release and repository push provide some compensating evidence.

Repo popularitycaution

The repository has one star and no forks, so there is little public evidence of broad adoption or external review. Low popularity is supporting caution rather than a verdict by itself.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The repository's tests and workflow provide some quality coverage, so this is not a severe gap.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings, uses read-only permissions, and has no untrusted checkout or injection sinks. However, all six action references are unpinned, leaving avoidable dependency-integrity exposure.