tacman/gcf-php

Release historycaution

This package is only 39 days old and has one release, so there is not yet enough history to demonstrate sustained maintenance or release reliability.

Repo issue activitycaution

One new issue and one new pull request in the last month show engagement, but neither had been closed or merged, leaving follow-through unproven.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap for a new package.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less clear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 3 action references are unpinned, so their inputs are less reproducible and should be treated as a hygiene concern.