php-openapi/yii2-fractal

Release historycaution

The package has 20 releases over about 2 years and 4 months, but only one release in the last 12 months; this indicates a slowed cadence despite the recent latest release.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which weakens evidence of ongoing maintenance beyond the latest release.

Repo toolingcaution

Composer and Make are used for project tooling, but no security scanning tools were detected, leaving a modest security-process gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and disclosure expectations are less transparent for consumers.

Workflow auditcaution

All 4 analyzed action references are unpinned, weakening build reproducibility and exposing workflow dependencies to mutable changes. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, which limits the risk to hygiene rather than a severe workflow threat.