rollerworks/uri-encoder

Release historycaution

The package has only four releases over about 12 years and no registry release in the last two years and ten months, which indicates a very slow release cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a concrete sign of currently inactive development.

Repo toolingcaution

The project uses Composer and Make, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, making the reporting and handling process for vulnerabilities less transparent.

Workflow auditcaution

All 8 analyzed action references are unpinned, and the audit found a high-confidence template-injection issue in phpstan.yaml; there were no untrusted checkouts or script-injection findings, so this is workflow hygiene risk rather than a severe release blocker.