phpxmlrpc/jsonrpc

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern.

Repo toolingcaution

The project uses Composer and Task for builds, but no security scanning tools were detected, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy, reducing clarity about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows were analyzed successfully, with no untrusted checkouts or script-injection sinks, but all five action references are unpinned and the release workflow has four high-confidence template-injection findings. The template findings lack the specified trigger corroboration, so this is a hygiene concern rather than a severe standalone risk.