digitalygo/envai-teams-sdk-php

Release historycaution

The package is brand new: all five releases landed on the same day, so there is not enough history to demonstrate sustained maintenance or stable release practice.

Repo bus factorcaution

All 32 recent commits came from one contributor, creating a continuity risk. Organization ownership provides some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no security policy, which leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three workflows use read-only permissions and contain no audited security findings, but all 11 action references are unpinned, reducing build reproducibility and increasing action-update risk.