bounceshift/bounceshift-php

Release historycaution

The package is only 77 days old with four releases, but releases have arrived about every 6 days, which shows active early development rather than abandonment. Its short history still leaves limited evidence of long-term stability.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers external validation but does not outweigh the observed maintenance activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For an SDK handling API credentials, that is a meaningful security-process gap.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities or guidance for handling security issues.

Token permissionscaution

The sole workflow has no top-level token permissions declaration. Although no write permissions were observed, explicitly restricting workflow tokens would provide stronger CI security hygiene.