docchula/vesta-client

Repo popularitycaution

The repository has no stars or forks and only one watcher, so there is little public adoption evidence; this is supporting context rather than a health verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest supply-chain hygiene gap.

Security policycaution

The repository has no published security policy, which makes reporting and handling vulnerabilities less transparent.

Workflow auditcaution

All four workflows were analyzed cleanly with no untrusted checkouts, script injection, or audit findings, but all 11 action references are unpinned. That weakens build reproducibility and leaves action updates less controlled.