andrew-svirin/ebics-client-php

Registry deprecationdanger

The registry marks the entire package as abandoned and names ebics-api/ebics-client-php as its replacement. Recent releases and active repository work reduce abandonment concern but do not remove the migration risk.

Repo bus factorcaution

All 12 recent commits came from one contributor, creating a meaningful continuity risk. Organization ownership provides some handoff capacity, so this is a caution rather than a severe abandonment signal.

Security policycaution

The repository has no security policy, leaving no documented reporting path for a library handling banking integrations. Other repository and workflow evidence does not compensate for that transparency gap.

Workflow auditcaution

Both workflows were analyzed with no high-confidence audit findings or unsafe-trigger sinks, but all 7 action references are unpinned and one workflow grants top-level write access. These are actionable supply-chain hygiene weaknesses, not standalone severe risks.