convertapi/convertapi-php

Release historycaution

The package has a history since 2018 with 17 releases, but it has had no release in about two years. That is a meaningful maintenance concern for a client library.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the roughly two-year-old registry release, this raises concern about responsiveness and future updates.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. The missing scanning is a genuine supply-chain hygiene gap, though the small dependency profile reduces its practical exposure.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.

Token permissionscaution

The sole workflow does not declare top-level token permissions. Although no write permissions were explicitly requested, the absence of a restrictive declaration is a workflow-hardening gap.