visualappeal/php-auto-update

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. That weakens evidence of ongoing maintenance despite the recent release.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the release is unsafe.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or audit failures. However, both action references are unpinned, leaving the workflow exposed to upstream action changes.