eliosfund/repcard-php-sdk

Release historycaution

The package has 8 releases, but none in the last 12 months; its latest release was about 18 months ago. This is meaningful maintenance concern for a Laravel SDK, though the project is not archived.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating no recent maintenance capacity. The repository remains available, but that does not offset the inactivity.

Repo toolingcaution

The project uses Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a minor transparency gap for a package that handles API credentials.

Workflow auditcaution

All 10 analyzed action references are unpinned, which weakens build reproducibility. There are no untrusted checkouts, script injections, dangerous triggers, or audit findings, so this is a hygiene caution rather than a severe risk.