wilkques/php-helper

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although releases and a recent push show current activity, the lack of recent contributor activity is a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. For a small helper library this is a limited process gap, but it leaves vulnerability reporting expectations undocumented.

Workflow auditcaution

The workflow has read-only permissions and no injection or high-severity findings, but all 3 action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.