brokeyourbike/bancore-api-client

Release historycaution

The package has had no registry release in over three years, despite six releases overall; this is meaningful evidence of inactivity for a library dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release and raising abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

All three workflows were analyzed with no untrusted checkouts or script injection, but all eight action references are unpinned and one high-confidence medium-severity finding identifies an archived action.