bluelightco/lever-php

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months. This indicates a recent maintenance lull, although the release history shows the project has not been abandoned outright.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and monitoring gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting vulnerabilities or communicating security fixes.

Workflow auditcaution

All 10 analyzed action references are unpinned, weakening reproducibility and update control. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, and missing top-level permissions blocks are acceptable on their own.