andreasnij/an-sms

Maintainerscaution

Only one account has registry publishing access. Because the repository is user-owned rather than organization-backed, this leaves limited visible publishing continuity if that maintainer becomes unavailable.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Although a recent release provides some counterevidence, this still weakens confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unspecified.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted-trigger sinks, but all three action references are unpinned, allowing dependency changes without a fixed revision.