retrofit-php/retrofit-php-converter-symfony-serializer

Release historycaution

This package is 128 days old with only one release, so there is no established release cadence and maintenance continuity remains uncertain.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. For a package only 128 days old, that is a meaningful sign of limited ongoing maintenance.

Repo popularitycaution

The repository has zero stars and forks and only two watchers. Popularity is not required for a small package, but these counters provide little supporting evidence of broad community adoption.

Security policycaution

The repository has no security policy. This is a transparency gap, though the package's small scope and lack of reported workflow findings partly limit its significance.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkout and script-injection sinks. Its pull_request_target trigger is ordinary here, but its one action is unpinned, leaving a modest reproducibility and supply-chain hygiene gap.