affiliatecom/zeroclick-sdk-sellers-php

Release historycaution

The package is only 46 days old and has just two releases, both published within minutes of each other. This provides little evidence of long-term maintenance or release stability.

Repo bus factorcaution

All nine recent commits came from one contributor, leaving maintenance dependent on a single individual. Organization backing provides some ability to hand work off, but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a maintenance and assurance gap for an SDK handling authentication and encryption.

Version stabilitycaution

Version v0.1.1 is not a stable-major release, so its API and behavior may still change materially despite not being marked prerelease.

Workflow auditcaution

The workflow is fully analyzed, uses read-only permissions, and has no detected injection or high-severity findings. However, all 7 action references are unpinned, so build inputs can change without a reviewed commit.