bfansports/cloud-processing-engine-sdk

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent release and repository push show some activity, but the absence of ongoing development is a meaningful maintenance concern.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although name differences can occur in related projects, this combination weakens confidence that the repository is the intended source.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe package.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear for a dependency with two runtime dependencies.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but both of its two action references are unpinned. That weakens build reproducibility and supply-chain hygiene.