mattiabasone/avro-serde-php

Workflow auditdanger

The only workflow was fully analyzed, but all 12 action references are unpinned and the high-confidence artipacked finding reports that checkout credentials are not disabled with persist-credentials: false. These create avoidable workflow supply-chain exposure.

Release historycaution

The package has existed for about 780 days with five releases, but only one release in the last 12 months; that indicates a slower maintenance pace without proving abandonment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has paused recently.

Repo toolingcaution

The project uses Make and Composer, showing established build tooling, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.