heleket/php-sdk

Repo bus factorcaution

One contributor made all commits in the last three months. The repository is user-owned rather than organization-owned, so there is little shown capacity for handoff if that maintainer stops.

Repo commit activitycaution

Only one commit was recorded in the last three months, indicating limited recent development activity and leaving maintenance continuity less demonstrated.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tooling was detected, leaving a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, injection findings, or audit findings, but both action references are unpinned, weakening reproducibility and build-integrity controls.