nativephp/php-bin

Release historycaution

The package has 20 releases over about three years, but only one release in the last 12 months despite a prior median interval of about 20 days, indicating a noticeably slower cadence.

Repo commit activitycaution

Only two commits were recorded in the last three months, which is light activity, although both were made by active maintainers rather than a single contributor.

Workflow auditcaution

All 18 analyzed action references are unpinned, and one workflow grants top-level write access; the audit also found medium-confidence template-injection patterns. No untrusted checkout or script-injection trigger was found, so these remain workflow hygiene concerns rather than a severe risk.