webmapp/osmphp

Release historydanger

The package has had no release in about three years and only two releases overall, indicating a largely inactive release process.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the past three months, consistent with the long release gap and increasing abandonment risk.

Workflow auditdanger

The audit found two high-confidence issues: a potentially spoofable bot condition and an unpinned container image. All eight analyzed action references are unpinned, and three workflows grant top-level write permissions, creating avoidable supply-chain exposure.

Repo issue activitycaution

There were no new or closed issues or pull requests in the past month, with outstanding repository work still present; this supports the evidence of limited current maintenance.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.