enterpriseve/eve2pve-api-php

Repo package mentiondanger

The linked repository name does not match the package name, and its README does not mention the package. Although name differences can occur with subpackages, both checks fail here, leaving package-to-source identity unclear.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Recent release and pull-request activity partly offsets this, but the current commit gap still raises a maintenance concern.

Security policycaution

No repository security policy was found. This is a transparency gap, but the repository does use CodeQL and Codacy scanning, which partly compensates.

Workflow auditcaution

All 7 of 7 analyzed action references are unpinned, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or other substantive findings, so this is a hygiene caution rather than a severe risk.