c24-toys/php-gls-shipping-sdk

Release historycaution

The package has only two releases since January 2023, with no releases in the last 12 months and a median interval of about 841 days. This indicates slow maintenance, though the May 2025 release shows the project is not entirely abandoned.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the long release interval, this raises the risk that fixes may arrive slowly.

Security policycaution

No security policy is present in the repository. This is a transparency gap, although Dependabot and the tested, documented project structure provide some compensating maintenance hygiene.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported audit findings. However, its one action reference is unpinned, leaving a minor workflow supply-chain hygiene gap.