gravity-legal/phpsdk

Release historydanger

The package has had no releases in more than five years; its 13 releases were concentrated near its initial launch, indicating severe abandonment risk despite the stable 1.0.4 version.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no ongoing maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, but it does not outweigh the much larger maintenance concern on its own.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, leaving avoidable build reproducibility and action-change risk.