psr-discovery/all

Release historycaution

Only three releases exist, with no release in the last 12 months; the latest release was published about 21 months ago. This is meaningful maintenance risk, although the package may be intentionally stable.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, reinforcing the concern raised by the lack of recent releases.

Repo issue activitycaution

There were no new issues or pull requests in the last month and no merged pull requests, indicating little recent project activity, though the issue count itself is unknown.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow uses a pull_request_target trigger without an untrusted checkout or script injection, but grants top-level write permissions and uses its only action unpinned. These are moderate workflow hygiene weaknesses, not severe evidence on their own.