nikic/php-ast

Release historycaution

The registry shows only one release and no releases in the last 12 months, which is a transparency and freshness concern, although the linked repository has recent commits and release notes for this version.

Repo toolingcaution

The project uses make and Composer, but no security-scanning tooling was detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The only workflow was fully analyzed with no untrusted checkout or script-injection findings, but both action references are unpinned, weakening build reproducibility.