phan/tolerant-php-parser

Release historycaution

The package is about 337 days old and has 27 releases, all within the last 12 months, with a median interval of 0 days. This shows active publishing but an unusually concentrated cadence, so it is mildly cautionary rather than proof of instability.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, despite the latest push being associated with the assessed release. This weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The missing scanning is a hygiene gap, not a standalone dependency blocker.

Version stabilitycaution

Version v0.2.0 is not a stable major release, although it is not marked as a prerelease and recent releases are not prereleases. The pre-1.0 status limits maturity confidence.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted checkout and script-injection patterns. Its one action use is unpinned, which is a modest reproducibility and supply-chain hygiene concern.