originphp/collection

Release historycaution

The latest release was over five years ago, with no releases in the past 12 months. The package is not deprecated, but this long release gap raises maintenance and abandonment concerns.

Repo commit activitycaution

The repository had no commits and no active maintainers in the past three months, consistent with more than five years since the last push and increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and hygiene gap rather than a severe risk.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The workflow audit completed fully and found no dangerous triggers or audit findings. However, both referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.