antistatique/pricehubble-php-sdk

Repo bus factorcaution

All 10 commits in the last three months came from one contributor, leaving maintenance capacity concentrated despite the organization-owned repository.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkout, script injection, or audit findings, but all 10 referenced actions are unpinned, weakening build reproducibility and supply-chain integrity.