msgpack/msgpack-php

Release historycaution

Only one release has been published over 109 days, so long-term release continuity is not yet demonstrated; the active repository provides some compensating evidence.

Repo toolingcaution

The project uses a build tool, but no security-scanning tool was detected, leaving security hygiene less visible.

Security policycaution

No repository security policy was found, which weakens the documented process for reporting and handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-confidence audit findings, but all 12 action references are unpinned; the absence of a top-level permissions block is acceptable here because no broad write permissions were observed.