coyshdigital/beaconcrm-php

Release historycaution

The package is young at 59 days, with two releases and a 14-day median interval. This shows initial activity but provides limited evidence of long-term maintenance.

Repo bus factorcaution

One contributor made all eight commits in the last three months, so the project has no demonstrated maintainer redundancy. Organization backing partly offsets this, but continuity still depends heavily on one person.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a build-hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency concern for an API client handling credentials.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-severity findings, but both action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own; unpinned actions remain a mild supply-chain hygiene concern.