quoyer/quoyer-php

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer does not have clear organizational backing to offset the thin maintenance history.

Release historycaution

The package has only three releases, all published within a few hours on its first day, so there is no established long-term maintenance pattern yet.

Repo commit activitycaution

The repository reports zero commits and zero active maintainers over the last three months, so sustained maintenance cannot yet be demonstrated; the recent push and two merged pull requests provide only limited compensation.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only job permissions, and has no detected dangerous findings. However, both action references are unpinned, weakening build reproducibility and update safety.