minchao/every8d-php

Release historycaution

The package has 9 releases since January 2018, but none in the last 12 months; its latest release was about 4 years ago. This indicates materially stale maintenance despite a previously established release history.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the package's long release gap. This weakens confidence that compatibility or defects will be addressed promptly.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerability reports are handled. This is a hygiene and response-capacity concern, not evidence of malicious behavior.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted-checkout and script-injection paths. However, all 3 action references are unpinned, leaving avoidable workflow supply-chain hygiene risk.