php-edifact/edifact-generator

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The same-day 1.4.0 release shows some recent maintenance, but the underlying development pace is still quiet.

Repo toolingcaution

The repository uses Composer, but no security-scanning tool was detected. This is a transparency and hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no published security policy, leaving reporting and response expectations undocumented.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no dangerous triggers, untrusted checkouts, injection issues, or other findings. However, all four analyzed action references are unpinned, which weakens build reproducibility and supply-chain controls.