voku/simple-php-code-parser

Project backingcaution

The registry namespace and repository owner match, but the project is owned by an individual rather than an organization, so there is less visible organizational redundancy.

Repo bus factorcaution

Two contributors were active, but one made 41 of 45 recent commits, so continuity depends heavily on the primary maintainer.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear despite the presence of security scanning tools.

Token permissionscaution

Two workflows declare read-only permissions and none declare top-level write access; one CI workflow lacks top-level permissions, which is a small transparency gap rather than a severe risk.