fond-of-oryx/customer-api

Release historycaution

This package has had only one release, 1.0.0, published in February 2023, with no releases in the last 12 months; that is a meaningful maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, indicating currently inactive development despite the repository not being archived.

Repo toolingcaution

The project uses Make and Composer build tooling, but no security scanning tools were detected; this is a modest hygiene gap rather than evidence of abandonment on its own.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package with runtime dependencies.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings or untrusted checkout, injection, or write-permission issues. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.