appwilio/russianpost-sdk

Release historydanger

The package has had no registry release for nearly six years, despite 16 releases overall; this materially raises abandonment and compatibility risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating inactive maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving maintenance and vulnerability hygiene weaker than it could be.

Security policycaution

The repository has no security policy, which weakens vulnerability-reporting transparency; the presence of repository tests and a documented release partly offsets this gap but does not remove it.

Workflow auditcaution

The only workflow was fully analyzed and has no detected dangerous findings, but all four action references are unpinned, leaving avoidable build-integrity risk.