phlib/base_convert

Release historycaution

The package has existed since 2016 but only three releases, with no release in the last 12 months and a median interval of about 4.5 years. The January 2025 release shows the project is not abandoned outright, but the cadence is very slow.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a currently quiet project. Its recent push and release provide some compensating evidence, but not ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a moderate transparency and maintenance gap rather than evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned. The absence of a top-level permissions block is acceptable here; unpinned actions remain a supply-chain hygiene weakness.