solophp/validator

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which is a maintenance concern. The recent release history partly offsets this, but it does not show current development activity.

Repo popularitycaution

The repository has zero stars and forks and one watcher. Low popularity is supporting evidence rather than a verdict, but it provides little external adoption signal.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap.

Security policycaution

The repository has no security policy. That weakens the project's documented process for receiving and handling vulnerability reports.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkouts, script injection, or high-severity findings, and the workflow scopes permissions at job level. However, all 5 action references are unpinned, reducing build reproducibility and supply-chain hygiene.