alsendo/alsendo-one-sdk

Release historycaution

The package is only 35 days old and has two releases, both published within about 3 hours. This shows initial activity but leaves little long-term maintenance history.

Repo bus factorcaution

One contributor made all 14 commits in the last 3 months, giving the project a bus factor of one. Organization ownership provides some handoff capacity, but no second active contributor is evidenced.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment.

Workflow auditcaution

The only workflow was fully analyzed with no injection, dangerous-trigger, or auditor findings, and it has no top-level write permissions. All four referenced actions are unpinned, which leaves the workflow exposed to moving action revisions.