jord-jd/php-languages

Repo bus factorcaution

One contributor made all commits during the last three months, with a 100% share, leaving maintenance dependent on a single person. The repository is user-owned rather than organization-backed, so there is no shown handoff capacity to offset this concentration.

Repo commit activitycaution

There was only one commit in the last three months, despite a recent release. This is limited evidence of ongoing maintenance for a young package and adds abandonment risk, though the package is small and recently updated.

Security policycaution

The repository has no security policy. That does not indicate a security defect, but it reduces transparency about how dependency or vulnerability reports would be handled.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no high-confidence audit findings or untrusted execution sinks. However, both of its two action references are unpinned, leaving a supply-chain hygiene gap.