originphp/yaml

Maintainerscaution

One registry maintainer is consistent with the organization-backed project, so this is not concerning by itself. It still leaves limited visible publishing redundancy if that maintainer becomes unavailable.

Release historycaution

The latest release was over five years ago, with no releases in the last 12 months. The package had a regular early cadence, but the long release gap is a meaningful maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the lack of releases since January 2021. This weakens evidence of ongoing maintenance.

Security policycaution

The linked repository has no security policy. This is a transparency and vulnerability-reporting gap, although the package is small and no direct security issue is shown.

Workflow auditcaution

The single workflow was fully analyzed with no unsafe triggers, untrusted checkouts, script injection, or audit findings. Both action references are unpinned, which is a modest reproducibility and supply-chain hygiene gap.