utopia-php/framework

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-process gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Version stabilitycaution

This release is a prerelease, and all recent releases are prereleases, so production compatibility is less certain despite the active release cadence.

Workflow auditcaution

The single workflow uses a pull_request_target trigger without an untrusted checkout or script injection, but it grants top-level write permission and uses its only action unpinned; the audit itself completed cleanly.