phpxmlrpc/extras

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance and raises abandonment risk.

Repo popularitycaution

The repository has only 4 stars and 1 fork. Popularity is supporting evidence rather than a verdict, but this provides little evidence of a broad maintenance community.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less clear for consumers.

Workflow auditcaution

All 5 analyzed action references are unpinned, which weakens build reproducibility. The high-confidence template-injection findings are hygiene concerns here because no untrusted checkout or dangerous trigger was observed; the audit itself was complete.