webfiori/php-structs

Registry deprecationdanger

Packagist marks the entire package as abandoned and names webfiori/ui as its replacement, which is a substantial dependency risk even though the repository remains active.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, indicating a recent maintenance gap despite the current release.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the package-to-source relationship is less transparent; the organization context partly reduces that concern.

Workflow auditcaution

All five workflows were analyzed with no high-confidence audit findings or dangerous triggers, but all 12 action references are unpinned, leaving avoidable build-reproducibility and action-substitution exposure.