rlvendramini/url-parser

Release historycaution

Only two releases span roughly five and a half years, despite one release in the last 12 months; this shows limited release history but not current abandonment.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance highly dependent on a single person.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are present; the missing scanning is a modest transparency gap for a small package.

Security policycaution

The repository has no security policy, so users are given no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three referenced actions are unpinned, weakening build reproducibility.