kiwilan/php-notifier

Release historycaution

The package has had no registry release for roughly two years and four months, with zero releases in the last 12 months. This is a meaningful maintenance concern despite the repository remaining available.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent push is present, current development activity appears limited.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, partially offset by Dependabot-based security tooling.

Workflow auditcaution

All 12 analyzed action references are unpinned, and the audit found one high-confidence bot-conditions issue; three of five workflows also grant top-level write permissions. No untrusted checkout or script-injection sink was found, so this is a hygiene concern rather than a severe standalone risk.