php-bug-catcher/perf-collector

Release historycaution

The package is only two days old, with five releases in that period. This shows active initial development but provides little evidence of long-term maintenance or release stability.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. The missing scanner is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the package's active development and clear source structure partly compensate.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or high-severity findings. However, all three action references are unpinned, leaving avoidable workflow supply-chain uncertainty.