webgraphe/phlux

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which weakens evidence of ongoing maintenance for a relatively young package.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a project hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Version stabilitycaution

Version v0.4.0 is not a stable major release, so its pre-1.0 status leaves more room for breaking changes despite it not being marked as a prerelease.

Workflow auditcaution

The sole workflow is fully analyzed, uses read-only job permissions, and has no audited findings or untrusted execution sinks. However, both action references are unpinned, so their contents can change without a fixed revision.