hitrov/oci-api-php-request-sign

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months, a meaningful maintenance concern; the recent push and registry releases partly offset, but do not erase, that quiet period.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations less transparent for a package that handles request signing credentials.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.