milanowicz/php-thread

Release historycaution

The package has only three releases since March 2022, with no release in the last 12 months and a median interval of about 18 months. This indicates slow maintenance, though the latest release is still within roughly two years.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although the repository is not archived, this weakens evidence of ongoing maintenance.

Security policycaution

The repository has no published security policy. This is a transparency gap for a package that executes and controls system processes, although it is not evidence of unsafe code by itself.

Workflow auditcaution

All four workflow action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, high-severity issue, or broad top-level write permissions, so this remains a hygiene concern rather than a severe risk.