not-empty/ala-microframework-php

Lifecycle scriptscaution

A post-install command runs during installation. This is a modest supply-chain and reproducibility consideration, though the signal alone does not show harmful behavior.

Release historycaution

The package has had no releases in the last 12 months, and its latest release was 1 year 9 months ago. This weakens confidence in ongoing maintenance despite nine releases overall.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Although the repository was pushed recently, the measured commit silence is a meaningful maintenance concern.

Security policycaution

The repository has no published security policy. This reduces transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, injection findings, or high-severity issues. However, all 3 of 3 action references are unpinned, leaving builds exposed to moving action revisions.