darthsoup/php-whmcs-api

Repo bus factorcaution

All three recent commits came from one contributor, giving the project a concentrated maintenance base. The linked repository is user-owned, so there is no organizational backing shown to offset that concentration.

Security policycaution

No security policy was found in the repository. This is a transparency gap for a client library, although it is not evidence of an active security problem.

Workflow auditcaution

All three analyzed workflow references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, or other higher-impact workflow findings, so this remains a hygiene concern.