pharaonic/php-slugify

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance concern, although the recent release and 11 merged pull requests provide some compensating activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap, not evidence that the release is unsafe.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency for a dependency, though it does not by itself indicate abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its two action references are unpinned, which is a supply-chain hygiene concern.