free-climb-api/php-sdk

Licensecaution

The artifact includes LICENSE.txt and the repository has a license file. Although the manifest says Unlicense while the detected file says MIT, the release is licensed; the mismatch merits a small transparency caution.

Repo bus factorcaution

One contributor made all recent commits, creating a narrow operational base. The organization-owned repository provides some handoff capacity, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is thin activity for an actively released package. The recent release history partly offsets this, but maintenance momentum is not strong.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The missing scanning layer is a modest repository hygiene gap, not evidence of an unsafe release.

Security policycaution

The repository has no security policy. For a telephony API client, this reduces the project's stated vulnerability-reporting transparency.