zetacomponents/document

Release historycaution

The package has existed since 2012 with 29 releases, but only one release appeared in the last 12 months; the recent 2025 release provides some evidence of continued publishing.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, despite the recent package release and repository push.

Repo toolingcaution

Composer and Phing provide build tooling, but no security scanning tools were detected. That leaves a transparency and maintenance-control gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned and the workflow has no top-level permissions block. The unpinned actions create a modest reproducibility and supply-chain hygiene concern.