parsecsv/php-parsecsv

Release historycaution

The latest registry release was published nearly five years ago, with no releases in the last 12 months. The repository was pushed more recently, but the package release cadence still indicates stale published artifacts.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This leaves current maintenance capacity unclear despite the repository not being archived.

Security policycaution

No security policy or security-scanning tooling was found. This is a transparency and response-process gap, though it is not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, creating avoidable build reproducibility and update risk.