phpactor/text-document

Release historycaution

The package has 12 releases since March 2019, but none in the last 12 months and the latest release was over two years ago. This indicates slowed maintenance, although the release history shows an established package rather than a new or abandoned artifact.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the release gap, this is evidence of reduced current maintenance capacity.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap, not evidence of unsafe code by itself.

Security policycaution

No repository security policy was found. This reduces transparency about vulnerability reporting and response, though it is less significant for a small, focused library than for a security-sensitive service.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings. However, all nine action references are unpinned, leaving avoidable build-integrity risk.