php-soap/encoding

Dependency profilecaution

The package has 19 runtime dependencies, including several related php-soap and foundational libraries; this is a meaningful dependency surface that increases transitive maintenance exposure, though it is consistent with the package's broad SOAP encoding functionality.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last 3 months, which is a material maintenance concern. The recent registry release and repository push provide some compensating evidence but do not fully resolve the unclear current development activity.

Repo popularitycaution

The repository has only 9 stars and 4 forks, indicating limited community adoption; popularity is supporting evidence rather than a decisive health verdict, so this is a modest caution.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting and disclosure expectations undocumented.

Token permissionscaution

All four workflows lack top-level token permissions declarations. No workflow declares top-level write access, which limits the severity, but explicit least-privilege configuration would provide stronger CI security hygiene.