orcarail/orcarail-php

Release historycaution

The package is young at 49 days and has three releases concentrated on its first day, so long-term maintenance is not yet demonstrated; recent repository activity partly compensates.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is little external adoption evidence; this is a supporting gap rather than a decisive health concern for a young package.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which is a workflow supply-chain hygiene concern.