phpoffice/phpword

Release historycaution

The package has existed since 2014 with 26 releases, but none in the last 12 months and the latest registry release was in June 2025. Recent repository commits partly offset the slower release cadence.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations less transparent.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers, sinks, or audit findings, but all 14 action references are unpinned. That is a workflow hygiene concern rather than a severe risk on its own.