inserve/copaco-cloud-api-php

Release historycaution

The package is about 10 months old with only two releases, spaced roughly nine months apart. That is limited evidence of a durable release process, though the latest release is recent.

Repo bus factorcaution

All recent commits come from one contributor, creating concentration risk. The organization-owned repository provides some capacity to hand maintenance off, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. This is a thin recent maintenance signal, even though the latest release was published during that period.

Security policycaution

No repository security policy was found. This is a modest transparency gap for reporting vulnerabilities, but it does not by itself indicate abandonment.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene.