ecomphp/lazada-php

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while issue totals are unavailable. This provides little evidence of community activity but is not proof of abandonment.

Repo popularitycaution

The repository has only 5 stars, 2 forks, and 1 watcher. This is supporting evidence of a small project, but popularity alone does not outweigh its recent releases and visible tests.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are configured. That leaves automated vulnerability or code scanning coverage unclear.

Security policycaution

The repository has no security policy, so there is no documented security-reporting or response process for consumers to rely on.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 3 action references are unpinned, and the workflow lacks a top-level permissions block, leaving avoidable supply-chain and token-scope hygiene gaps.