apigee/apigee-client-php

Dependency profilecaution

The package has 19 runtime dependencies, including several HTTP and Symfony components. This is a meaningful dependency surface for a client library, though not inherently unsafe or unusually excessive from the provided evidence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release history partly offsets this, but the absence of current development activity raises maintenance risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This leaves a gap in the repository's ongoing security hygiene.

Security policycaution

The repository has no security policy, making vulnerability reporting and response expectations less transparent for a library used in API integrations.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all four action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.