phpnomad/array-json-config

Licensecaution

A license file is present, but the manifest declares MIT while the detected artifact license is GPL-3.0. The mismatch creates a real licensing question despite the otherwise clear licensing evidence.

Release historycaution

This package has made only one release, about 1 year and 9 months ago, with no releases in the last 12 months. That leaves maintenance and compatibility maturity unproven.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although it was pushed within the last year, the observed recent development activity is absent.

Security policycaution

No repository security policy was found. This is a modest transparency gap, but it does not outweigh the repository's other safeguards on its own.

Workflow auditcaution

All 8 analyzed action references are unpinned, which weakens build reproducibility and update control. The audit was complete and found no untrusted checkouts, injection sinks, or high-severity findings, so this is a hygiene concern rather than a severe workflow risk.