cyan-wings/qiniu-php-sdk

Release historycaution

This is a young package at about seven months old with only one release, so its release track record and long-term maintenance are unproven.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern for a package with only one release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security hygiene unconfirmed.

Security policycaution

The repository has no security policy, reducing transparency about how users should report and receive fixes for vulnerabilities.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers or audit findings, but all five action references are unpinned, weakening build reproducibility and update control.