ircmaxell/php-c-parser

Release historycaution

Only two releases span about 6 years and 5 months, with one release in the last 12 months. The recent release helps, but the very long interval indicates limited release momentum.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. The recent release and release notes provide some compensating evidence, but current development activity remains uncertain.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. The missing scanning is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This reduces transparency for reporting vulnerabilities, though it does not by itself indicate that the package is unsafe to depend on.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.