prestige-solution/ts-x-php-framework

Licensecaution

The manifest declares GPL-3.0, while the artifact and repository license files are detected as MIT. The release is licensed, but the mismatch creates uncertainty for adopters.

Repo bus factorcaution

All 35 recent commits came from one contributor, so maintenance continuity depends heavily on a single person. Organization ownership provides some handoff capacity but does not remove the concentration risk.

Repo toolingcaution

The project uses Composer, but no security-scanning tool was detected. This is a modest transparency and maintenance gap, not evidence of an unsafe release by itself.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed cleanly with no untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.