talred/php

Release historycaution

This package is brand new: all three releases appeared on the same day, so there is little evidence yet of sustained maintenance or compatibility over time.

Repo bus factorcaution

All five recent commits came from one contributor, creating a real continuity risk if that maintainer becomes unavailable. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest gap in ongoing dependency and code hygiene.

Security policycaution

The repository has no security policy, so vulnerability reporting and disclosure expectations are not documented.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned. The missing top-level permissions block is acceptable on its own and no write token is declared.