idanalyzer/id-analyzer-v2-php-sdk

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, which weakens confidence in current maintenance capacity even though releases continued recently.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, leaving a modest gap in repository assurance.

Security policycaution

The repository has no security policy, so users are given less visibility into vulnerability reporting and response practices.

Workflow auditcaution

The single workflow grants top-level write permissions and all four analyzed action references are unpinned. The audit found no untrusted checkout, script injection, or other reported sinks, so this is a hygiene concern rather than a severe workflow risk.