ircmaxell/php-cfg

Release historycaution

The package has only five releases since February 2019, with no releases in the last 12 months and a median interval of about 23 months; recent repository activity partly compensates but does not remove the release-cadence concern.

Repo bus factorcaution

All 13 recent commits came from one contributor, so maintenance depends heavily on a single person; the repository is user-owned rather than organization-backed.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but both action references are unpinned, leaving their fetched revisions less reproducible.