leo-gan/gld-ion-php

Release historycaution

This package is 0 days old with only one release, so there is no meaningful release track record yet; the included release notes provide some transparency but do not establish durability.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, but the repository is newly created and was pushed recently, so this is mainly limited historical evidence rather than demonstrated abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap for a newly published library, not evidence of unsafe code.

Version stabilitycaution

Version 0.2.0 is not a stable major release, which signals an early-stage API; it is not marked prerelease, so this is a modest maturity concern rather than a severe risk.

Workflow auditcaution

All 10 analyzed action references are unpinned, and two of three workflows grant top-level write permissions; the audit found no untrusted checkout, script injection, or high-severity issue, so this is workflow hygiene caution rather than a severe risk.