phpcq/repository-definition

Release historycaution

Only three releases have been published since June 2022, with a median interval of about 665 days, although two releases arrived in the last 12 months and the latest was recent.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release provides some compensating evidence, but the lack of ongoing commit activity still lowers maintenance confidence.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear.

Workflow auditcaution

All six workflow action references are unpinned, and the audit found one high-confidence unsound condition; the three cache-poisoning findings are low confidence and therefore hygiene concerns only. The workflow audit itself is complete.