glook/pecom-sdk

Release historycaution

The package is only 36 days old with three releases, all clustered within a short period; this shows activity but provides little evidence of long-term maintenance.

Repo bus factorcaution

One contributor made all nine recent commits, leaving no demonstrated backup maintainer and increasing continuity risk for this young package.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users are given no documented process for reporting vulnerabilities or coordinating fixes.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no dangerous sinks or findings, but all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.