league/uri-components

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. This is a maintenance caution, although the package still has recent registry releases and a recently pushed repository.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, so users have no documented project-specific channel or process for reporting vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, its one action use is unpinned, which is a minor reproducibility and supply-chain hygiene gap.