apideck-libraries/sdk-php

Repo bus factorcaution

One bot made 21 of 23 recent commits, concentrating activity at about 91%. The organization-owned repository provides some handoff capacity, but the observed contributor concentration remains a maintenance caution.

Repo popularitycaution

The repository has only 1 star and 0 forks, so independent adoption evidence is limited; popularity is supporting evidence rather than a decisive health measure.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tool was detected, leaving a modest gap in repository hygiene.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

Both workflows use top-level write permissions and all 3 analyzed actions are unpinned, creating CI hygiene and reproducibility concerns. However, the audit found no untrusted checkouts, script injection, or high-severity findings, so this is not a severe workflow risk.