edulazaro/toxicfilter-sdk

Release historycaution

This is the package's first release, published today, so there is no release track record yet; the repository and documentation provide some compensating evidence but cannot establish long-term maintenance.

Repo commit activitycaution

There have been no commits and no active maintainers in the last three months. Because the package is only hours old, this is more consistent with limited history than confirmed abandonment, but it still leaves maintenance unproven.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected. The clean workflow audit partly compensates, while the missing scanning remains a modest transparency gap.

Security policycaution

The repository has no security policy, leaving no documented reporting process for vulnerabilities in a package intended to handle API interactions.

Workflow auditcaution

The single workflow completed fully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, so their versions can change outside the repository's control.