phenx/php-svg-lib

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push provide some compensation, but this still weakens confidence in ongoing maintenance.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with 25 open issues and one open pull request. This indicates limited recent project interaction, though it is not by itself evidence of abandonment.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than a severe concern.

Workflow auditcaution

The single workflow was fully audited with no reported findings, no untrusted checkouts, and no script-injection sinks. However, all three action references are unpinned, leaving a build reproducibility and action-integrity gap.