wyrihaximus/psr-3-utilities

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding installation-time behavior that deserves more trust than a package with no lifecycle hooks.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating currently quiet development despite the recent release history.

Repo toolingcaution

The repository uses Composer and Make, but no security-scanning tools were detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unspecified.

Workflow auditcaution

Both workflows grant top-level write permissions and all two analyzed action references are unpinned. The audit found no untrusted checkout, injection, or high-severity issue, so this is workflow hygiene rather than a severe risk.