jasny/reflection-factory

Release historycaution

The package has had no release in the last 12 months, and its latest release was in June 2022, indicating more than four years without a published update.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long pause since the latest release and raising abandonment concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no unsafe triggers, sinks, or audit findings, but both of its two action references are unpinned, weakening build reproducibility.