sirix/inertia-psr15

Licensecaution

The manifest declares BSD-3-Clause, while the artifact license file is recognised as MIT; this mismatch creates avoidable licensing uncertainty despite a license file being present.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months. The recent release partly offsets this because it was published on the same day as the last repository push, but ongoing maintenance is not yet demonstrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool is configured, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This does not show a security defect, but it weakens the project's documented process for handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, all 4 of its action references are unpinned, which weakens build reproducibility and supply-chain hygiene.