zero-to-prod/psr4-varname

Release historycaution

The package has seven releases over about 20 months, but no release in the last 12 months and its latest release was about one year ago. This indicates stalled maintenance despite a previously active early cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That supports the release-history concern and leaves current maintenance capacity un demonstrated.

Workflow auditcaution

All seven analyzed action references are unpinned, and the audit found two high-confidence template-injection findings in annotate.yml. No pull_request_target or workflow_run trigger was present, so these are important hygiene concerns rather than a severe workflow risk on their own.