pantono/phinx

Release historycaution

Only two releases are shown, both within three days, with no later release activity over roughly seven months. That gives little evidence of sustained maintenance for this release.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. This is a strong sign that maintenance may have stalled.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity in the last month. This reinforces the lack of recent development activity, although issue counts are partly unknown.

Security policycaution

The linked repository has no security policy. This is a transparency gap, though it is less significant than the maintenance concerns.

Workflow auditcaution

All 19 analyzed action references are unpinned, which weakens build reproducibility and update control. The reported low-confidence cache-poisoning finding is hygiene-level rather than a severe risk on its own.