php-vcr/vcr-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance warning despite the recent release and push timestamp.

Repo issue activitycaution

There are four open issues and no recent issue or pull-request activity. This is a modest sign of limited current maintenance, but not evidence of abandonment by itself.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a process gap, not a standalone dependency-health failure.

Security policycaution

No repository security policy was found, reducing transparency for reporting vulnerabilities and handling disclosures.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, leaving avoidable workflow supply-chain exposure.