nanasess/php8-compat

Release historydanger

This is the package's only release, published over five years ago, with no releases in the last 12 months. That substantially reduces confidence in ongoing maintenance.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with a project that has been inactive since December 2020.

Maintainerscaution

One registry maintainer creates a thin publishing base. The linked repository is user-owned, so the short registry list is not itself decisive, but there is no provided evidence of broader maintenance capacity.

Security policycaution

The repository has no security policy. For this small compatibility wrapper that is a transparency gap, though it is less significant than the absence of recent maintenance.

Workflow auditcaution

The workflow audit completed without security findings or untrusted-trigger sinks. However, both analyzed action references are unpinned, leaving avoidable build reproducibility and action-change risk.