devcycle/php-server-sdk

Release historycaution

The package has existed for about 4 years and 9 months with 25 releases, but only one release in the last 12 months indicates a slower recent cadence despite the latest release being recent.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected, leaving automated dependency or code-security coverage unclear.

Workflow auditcaution

All four workflows were analyzed with no audit findings or untrusted checkouts. However, five of eight action references are unpinned and one workflow has top-level write permissions, creating moderate reproducibility and permissions hygiene concerns without a demonstrated dangerous sink.