wyrihaximus/fake-php-version

Repo bus factorcaution

All three commits in the last 3 months came from one contributor, giving the project a concentrated maintenance base and limited visible backup capacity.

Security policycaution

The repository has no security policy. For a small package this is not disqualifying, but it reduces transparency about how vulnerability reports are handled.

Workflow auditcaution

All five workflows were analyzed with no untrusted checkout or script-injection findings, but 5 of 15 action references are unpinned and one high-confidence medium-severity finding uses an archived action. This is a moderate reproducibility and maintenance concern.