gersonfs/sellercenter-sdk-php

Release historycaution

The package has had three releases, but none in the last 12 months and its latest release was in December 2024, indicating a meaningful maintenance pause.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern from the release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting less clear for a package that handles API credentials and marketplace operations.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous findings, but both of its two action references are unpinned and there is no top-level permissions block. The unpinned actions are a supply-chain hygiene concern, not a severe risk on their own.