fond-of-kudu/customers-rest-api-connector

Release historydanger

The package has had only three releases, all within about one week, and none in the last two years. This strongly suggests maintenance has paused, despite the short initial release cadence.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with more than two years since the last push. This is strong evidence of a maintenance pause.

Repo toolingcaution

The project uses Make and Composer, which supports repeatable development workflows. No security scanning tools are present, leaving a modest hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and maintenance expectations. This is a genuine but non-severe gap alongside the broader maintenance concerns.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, injection findings, or audit findings. However, all three action references are unpinned, which weakens build reproducibility, while the lack of a top-level permissions block is acceptable on its own.