encreinformatique/expertsender-api-php

Release historycaution

The package is about five years old with six releases, but only one release in the last 12 months and a median interval of about 251 days indicate a slow maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release partly offsets this, but the current development activity is still thin.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a repository-security gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility.