php-collective/decimal-object

Release historycaution

The package has six releases since October 2023, but none in the last 12 months; this indicates slowing release maintenance, partly offset by recent repository activity.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. The recent repository push is a compensating sign, but the lack of observed commit activity still weakens maintenance confidence.

Repo toolingcaution

The repository uses Make and Composer for build tasks, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, injection findings, or high-severity issues. However, all five action references are unpinned, which weakens build reproducibility and update safety.