always-open/oxylabs-api

Dangerous workflowscaution

One workflow uses pull_request_target, which can be security-sensitive, but no untrusted checkout or script-injection patterns were detected across the four analyzed workflows.

Lifecycle scriptscaution

A post-autoload-dump install-time lifecycle script is present. This is an additional execution surface and warrants inspection, although the signal does not establish that the script is unsafe.

Repo commit activitycaution

Only 2 commits occurred in the last 3 months, indicating light recent development. Both activity and contributor counts are nonzero, so this is a maintenance caution rather than a severe abandonment signal.

Repo popularitycaution

The repository has zero stars, forks, and watchers, which provides no external adoption evidence. Popularity is supporting evidence only, so this modestly limits confidence rather than indicating abandonment by itself.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a transparency and assurance gap, not evidence that the package is unsafe.