talleu/php-redis-om

Project backingcaution

The repository is owned by an individual user rather than an organization, so publishing capacity is concentrated in one person. This is a modest resilience concern, not a severe risk given the package's release history.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. This is a meaningful recent maintenance gap, partially offset by the strong release history and the repository push in May.

Security policycaution

The repository has no SECURITY.md policy. For a library with repository security scanning this is a transparency gap, but it is not evidence of abandonment by itself.

Workflow auditcaution

All 4 analyzed action references are unpinned, and the auditor reported a high-confidence, high-severity unpinned container image finding. The workflow has no untrusted checkout or script-injection findings, but the image should be pinned for reproducible and safer builds.