indeximstudio/shipengine

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, which is a meaningful sign of currently limited maintenance activity.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no community adoption signal to offset the thin recent activity evidence.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected; this is a modest repository hygiene gap rather than evidence of abandonment.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting expectations unclear for an API client library.

Workflow auditcaution

Both workflows were analyzed successfully with no untrusted checkout or injection sinks, but all four action references are unpinned and a high-confidence insecure-commands finding was reported in CI. These are workflow hygiene risks, not standalone evidence that the package is unsafe.