caiyun/sms

Release historycaution

This is the first release, published 0 days ago, with only one release recorded; there is not yet enough history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository shows 0 commits and 0 active maintainers in the past 3 months, which is consistent with its same-day launch but provides no evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected; that is a transparency and assurance gap for a package handling service credentials.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a modest transparency gap for a package integrating multiple SMS providers.

Workflow auditcaution

The workflow audit found no dangerous triggers, untrusted checkouts, or audit findings, and it uses read-only permissions; however, both analyzed actions are unpinned, weakening build reproducibility and supply-chain hygiene.