marcincook/gastro-php

Release historydanger

This is the only release, published about three years ago, with no releases in the last 12 months. That is strong evidence of an immature or abandoned package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating very weak current maintenance.

Security policycaution

The repository has no security policy, leaving contributors without a documented vulnerability-reporting route. This is a transparency gap, although it does not outweigh the maintenance evidence by itself.

Workflow auditcaution

All 9 action references are unpinned, three workflows grant top-level write permissions, and the audit found a high-confidence bot-conditions issue. No untrusted checkout or script injection was found, so this is caution rather than a severe workflow risk.