phenx/php-font-lib

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, indicating a quiet current maintenance period despite the recent release.

Repo issue activitycaution

No issues or pull requests were opened, closed, or merged in the last month, so current community activity is limited; the existing open work provides some evidence the project is still tracked.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap rather than a severe dependency risk.

Workflow auditcaution

The sole workflow was fully analyzed with no high-confidence findings or dangerous triggers, but all three action references are unpinned, weakening build reproducibility and update control.