drteam/uon

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement specified. This is a serious dependency-maintenance warning despite the recent release and active repository.

Repo bus factorcaution

One contributor made all 7 recent commits, giving the project a bus factor of one. Organization backing offers some handoff capacity, but no second active contributor is shown.

Security policycaution

The repository has no published security policy. For an API client, this is a transparency gap, though it is less severe than missing tests or licensing.

Workflow auditcaution

The sole workflow was fully analyzed with no detected dangerous sinks or audit findings, and it avoids broad top-level write permissions. All 6 action references are unpinned, leaving avoidable build-integrity risk.