intarocrm/rest-api-client

Repo package mentioncaution

The repository name matches the package, but the README does not mention the package name, so the package-to-repository relationship is less clearly documented despite the matching repository name.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving repository security checks less explicit than they could be.

Security policycaution

No repository security policy was found, reducing transparency about vulnerability reporting and response procedures.

Workflow auditcaution

All 15 workflow action references are unpinned, and the audit found a high-confidence unsound condition; the two cache-poisoning findings are low confidence and therefore hygiene concerns only. No untrusted checkout or script injection was detected.