immobiliarelabs/braze-sdk

Release historycaution

The package has 19 releases over roughly 4.7 years, but only one release in the last 12 months. The latest release is recent, which partly offsets the slower cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push show some ongoing activity, but the short-term maintenance pause remains a concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a maintenance and transparency gap, though it does not show a direct defect in the release.

Security policycaution

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting expectations unclear.

Workflow auditcaution

The audit analyzed both workflows and found no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, creating avoidable workflow supply-chain drift; the absence of top-level permissions is not a concern by itself.