verifaid/verifaid-php

Release historycaution

This is a very new package, with only two releases published within minutes and no longer-term release pattern. That limits evidence of sustained maintenance, though the absence of history is expected for a new project.

Repo commit activitycaution

No commits or active maintainers were recorded over the last three months. Because the project is only hours old, this is weak evidence of abandonment but still leaves maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no published security policy, leaving the process for reporting and handling vulnerabilities unclear.

Workflow auditcaution

The single workflow was fully analyzed without dangerous triggers or audit findings, but both of its two action references are unpinned. That leaves dependency updates less reproducible.