cloudcreativity/json-api-testing

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent package publication partly offsets this, but the lack of current development activity is a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a transparency gap, although the repository does have a CI workflow and no other workflow-risk indicators were found.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response expectations undocumented.

Token permissionscaution

The only workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege settings would provide stronger workflow transparency.