lfphp/func

Licensecaution

The manifest declares Apache-2.0, while the artifact license file is detected as MIT; although a license is present, the mismatch creates legal ambiguity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing development despite recent registry releases.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions, with no high-confidence audit findings. Both action references are unpinned, which leaves the build exposed to reference changes and is a hygiene concern.