omisai/php-continents

Release historycaution

Five releases over about 2.5 years and only one release in the last 12 months indicate a slow cadence, though the package has continued to receive releases.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance slowdown despite the recent repository push.

Workflow auditcaution

Both workflows were analyzed successfully, but all two action references are unpinned, one workflow grants top-level write permissions, and a high-confidence template-injection finding was reported. No pull_request_target, workflow_run, untrusted checkout, or script-injection path was found, so these remain workflow-hygiene concerns rather than a severe dependency risk.