dcarbone/php-consul-api

Repo bus factorcaution

All 40 recent commits came from one contributor, with that contributor holding the entire recent commit share. This creates a meaningful continuity risk despite the current activity level.

Security policycaution

The repository has no published security policy. That is a transparency gap for a client library, although the available automated tooling provides some compensating evidence.

Workflow auditcaution

The sole workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, all 12 action references are unpinned, leaving build inputs less reproducible and increasing workflow supply-chain exposure.