m1sh0u/polyglot-php

Release historydanger

The latest release was in July 2022, with no releases in the following four years; this is strong evidence of a stagnant release process despite the package having four releases overall.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating limited ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a minor hygiene gap, partly offset by the package's small dependency surface.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented; this is a modest transparency gap for a maintained library.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both of its two action references are unpinned, weakening build reproducibility and supply-chain hygiene.