vansari/phplint-merger

Release historycaution

The package has had no release in over five years and none in the last 12 months, which is a meaningful maintenance concern despite five releases overall.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months; combined with the old latest release, this indicates inactive development.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities, though this is a hygiene concern rather than evidence of unsafe code.

Workflow auditcaution

The workflow audit completed fully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, leaving a modest workflow reproducibility and integrity gap.