hawk-hhg/hawki-client-backend

Release historycaution

This is the only recorded release, published about 11 months ago, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing upkeep.

Repo toolingcaution

The project uses Composer for builds, but no security scanning tooling was detected, leaving a transparency and maintenance gap for a package handling encrypted connections.

Security policycaution

The linked repository has no security policy, which is a meaningful transparency gap for a backend package that handles sensitive connection data.

Workflow auditcaution

The only workflow gives every workflow a top-level write token, leaves all 6 action references unpinned, and contains a high-confidence condition that always evaluates true. No untrusted trigger or checkout sink was found, so this is a serious hygiene concern rather than a standalone severe risk.