slam/php-p7m-reader

Maintainerscaution

Only one account has registry publishing access, creating a limited publishing continuity margin. The linked repository is maintained under the same user-owned project, which provides some compensating ownership context.

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months, which is a maintenance warning. However, the recent release history and repository push provide some compensating evidence rather than indicating abandonment.

Repo issue activitycaution

There are only two open issues and no recent issue or pull-request activity. This is not itself a severe concern, but it provides limited evidence of active user or maintainer interaction.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools were detected. The missing security automation is a governance gap, though it does not by itself make the package unfit to use.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented. This lowers transparency but is not a standalone dependency blocker for this small library.