comfino/api-client

Registry deprecationdanger

Packagist marks the entire package as abandoned and names comfino/php-api-client as its replacement. This is a severe adoption risk because future fixes and security maintenance are not expected here.

Repo bus factorcaution

All four recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving maintenance concentrated.

Repo commit activitycaution

The repository recorded four commits in the last three months, so it is not completely inactive. This limited activity is insufficient to overcome the package-level abandonment declaration.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This matters more for an API client that handles payment-gateway integrations.

Workflow auditcaution

The workflow audit was complete and found no high-confidence dangerous patterns, but all six action references are unpinned. That weakens build reproducibility and supply-chain hygiene.