brd6/notion-sdk-php

Project backingcaution

The package and repository are owned by the same individual account, so the concentrated contributor activity is not offset by visible organizational backing.

Repo bus factorcaution

All 40 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented for a security-sensitive API client.

Workflow auditcaution

The sole workflow was fully analyzed and has no untrusted checkout or script-injection path, but all 13 action references are unpinned. Four low-confidence cache-poisoning findings are hygiene concerns rather than severe evidence on their own.