notauniondev/portable-utf8

Release historycaution

The package has 238 releases, but all recorded releases occurred on the same day with a median interval of zero days, which is unusual and provides little evidence of a sustained release process.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, weakening evidence of ongoing maintenance even though the repository is not archived.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

The workflow uses read-only permissions and has no reported audit findings, unsafe checkouts, or script-injection findings. However, all 8 analyzed action references are unpinned, leaving builds exposed to unreviewed action changes.