inserve/pax8-api-php

Repo bus factorcaution

One contributor made all commits in the last 3 months, leaving maintenance dependent on a single active contributor. Organization ownership provides some handoff capacity but does not remove the concentration concern.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating limited recent maintenance activity even though the repository was updated for the current release.

Security policycaution

No repository security policy was found. This is a transparency gap for reporting and handling vulnerabilities, but it is not evidence that the package is unsafe.

Version stabilitycaution

Version 0.1.7 is not a stable major release, which indicates a still-evolving API, although it is not marked as a prerelease and recent releases have been stable.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, but all 3 action references are unpinned. The missing top-level permissions block is acceptable on its own.