calliostro/php-discogs-api

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Although the release and recent push show some activity, this is a meaningful maintenance warning.

Repo popularitycaution

The repository has 9 stars and 2 forks, indicating limited adoption. Popularity is supporting evidence only, and the package has other signs of structured maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a hygiene gap rather than evidence that the release is unsafe or unmaintained.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and response, though the package's tests, documentation, and license provide compensating project structure.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 10 action references are unpinned. Three low-confidence cache-poisoning findings are hygiene concerns only under the audit rules.