deliciousbrains/spinupwp-php-sdk

Registry deprecationdanger

Packagist marks the entire package abandoned, with no distinct replacement package listed; this is a substantial maintenance and adoption risk for new dependents.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, indicating a recent pause in development; this is partly offset by the recent repository push and release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a minor transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 3 workflows were analyzed with no audit findings or dangerous triggers. However, 4 of 6 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.