perseid/skeleton-php

Release historycaution

Only two releases exist, both published on the same day about 163 days ago, so there is limited evidence of an established maintenance cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which weakens evidence of ongoing maintenance for a package only about five months old.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, reducing clarity about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers or audit findings, but all six action references are unpinned, leaving builds exposed to upstream action changes.