alexstewartja/dxtrade-php-sdk

Release historycaution

This is the only release, published 506 days ago, with no releases in the last 12 months. That leaves limited evidence of ongoing compatibility or maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last 3 months. The repository is not archived, but recent development activity is absent.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. Dependabot provides some compensating security tooling, but not a response policy.

Workflow auditcaution

All 9 analyzed action references are unpinned, and 3 of 4 workflows grant top-level write permissions. A high-confidence bot-conditions finding also affects the Dependabot auto-merge workflow, although no untrusted checkout or script injection was detected.