manza/manza-php

Release historycaution

This is a new package with three releases all published on the same day, so there is not yet enough history to demonstrate long-term maintenance or stability.

Repo bus factorcaution

All five recent commits came from one contributor, creating a meaningful continuity risk; organization ownership provides some capacity to hand off maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so consumers are not given a documented path for reporting vulnerabilities or learning the project's security process.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no dangerous triggers, sinks, or high-severity findings. However, all five analyzed action references are unpinned, weakening build reproducibility and action supply-chain hygiene.