slub/php-mods-reader

Repo bus factorcaution

All 17 recent commits came from one contributor, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Version stabilitycaution

Version v0.5.0 is not a prerelease, but the package remains below major version 1, so its API maturity is somewhat limited.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 6 action references are unpinned, weakening build reproducibility and supply-chain protection.