thepercival/php-sports-helpers

Licensecaution

The manifest declares GPL-2.0-or-later, while the artifact license file is detected as Apache-2.0. Both are explicit licenses, but the mismatch should be resolved before adoption.

Repo bus factorcaution

All 5 commits in the last 3 months came from one contributor, so maintenance depends heavily on a single person despite recent activity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures unspecified.

Workflow auditcaution

All 3 workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 9 action references are unpinned, weakening build reproducibility and update safety.