mekras/php-speller

Release historycaution

The package has 25 releases since 2015, but none in the last three years; this is meaningful evidence of slowed maintenance for a library dependency.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, reinforcing the long release gap and increasing abandonment risk.

Security policycaution

No security policy is present in the repository. This is a transparency gap, though it is less significant because the package has other maintenance and build documentation.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned; the missing top-level permissions block is acceptable on its own and is not treated as a severe risk.