shuguroff/libxl-php

Project backingcaution

The repository is owned by an individual user, so the small contributor base is not supported by visible organization backing.

Release historycaution

This is the package's only registry release, published about 205 days ago, so its long-term maintenance record is still unproven.

Repo toolingcaution

Composer and make are used for builds, but no security scanning tooling was detected, leaving a modest transparency and detection gap.

Security policycaution

The repository has no security policy, so the process for reporting and handling vulnerabilities is unclear.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkout or injection findings, but all five action references are unpinned; job-level permissions reduce the permissions concern without addressing mutable action code.