tbht/php-negotiator

Release historycaution

The package has five releases since July 2020, but none in the last 12 months and its latest release was in March 2021. This indicates a mature but inactive project rather than an actively maintained dependency.

Repo commit activitycaution

There were no commits or active maintainers in the measured three-month period, consistent with the old last-pushed date and increasing abandonment risk.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap for a dependency project.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations undocumented. This is a minor transparency concern rather than evidence of unsafe code.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers or audit findings, but both analyzed action references are unpinned. That leaves avoidable build-integrity risk.