pecl/yaml

Release historycaution

Only one release has been published over about ten months, limiting evidence of a mature release cadence. Recent repository activity and organization backing partly compensate for that thin registry history.

Repo toolingcaution

The project uses a build tool, but no security-scanning tool was detected; this is a modest transparency and hygiene gap.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all 9 action references are unpinned, weakening build reproducibility.