phpdocumentor/reflection-common

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The current release and recent push provide some counterweight, but the lack of recent development activity raises maintenance risk.

Security policycaution

No repository security policy was found. For a small library this is a transparency gap, though it does not by itself indicate abandonment or make the release unfit.

Workflow auditcaution

All five analyzed action references are unpinned, weakening reproducibility and update control. The audit found no untrusted checkouts, script injection, excessive top-level permissions, or high-severity findings, which limits the risk to build hygiene.