nguyenanhung/php-file-cache

Release historycaution

The package has four releases since August 2021, but none in the last 12 months and the latest was published in September 2024. This indicates a meaningful maintenance gap for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Together with the stale release history, this raises abandonment risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. This is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. For a small library this is a transparency gap, though it is less serious than the lack of recent maintenance.

Workflow auditcaution

All three analyzed action references are unpinned, which weakens build reproducibility, although the workflow has no untrusted checkout, script injection, or high-severity findings and was fully analyzed.