yeslogic/prince-php-wrapper

Release historycaution

The package has made no release in the last 12 months, despite eight releases overall and a latest release about 15 months ago. This indicates a meaningful maintenance slowdown, though the project is not evidently abandoned.

Repo commit activitycaution

There were no commits and no active maintainers in the most recent three months, consistent with the release pause. This lowers confidence in prompt maintenance, although the repository is not archived.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tooling was detected. The missing scanning is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy. For a small wrapper this is not severe, but it leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned. That leaves workflow dependencies exposed to upstream changes, while the absence of a top-level permissions block is acceptable on its own.