deltatuts/fixer-php-sdk

Release historycaution

This is the package's only release, published about seven years ago, with no releases in the last 12 months. That is a substantial maintenance concern for a dependency.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The repository is not archived, but the lack of recent development weakens evidence of ongoing maintenance.

Security policycaution

The repository has no formal security policy. The README provides a security contact, which partly compensates, but formal vulnerability-handling guidance is still absent.

Version stabilitycaution

The assessed version is v0.1.0 and is not a stable major release, which adds maturity risk alongside the package's one-release history.

Workflow auditcaution

The workflow audit completed successfully with no dangerous triggers or audit findings, but all 3 action references are unpinned. That leaves avoidable build-reproducibility and action-integrity hygiene risk.