iotype-ai/sdk

Release historycaution

This package is only 41 days old and has one release, so there is not yet enough history to demonstrate sustained maintenance or release stability.

Repo bus factorcaution

One contributor made all nine recent commits, leaving maintenance dependent on a single individual; organization ownership provides some handoff potential but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and security-process gap.

Security policycaution

The repository has no security policy, so users lack documented guidance for reporting and handling vulnerabilities.

Workflow auditcaution

All 20 analyzed action references are unpinned, weakening build reproducibility and supply-chain hygiene; one workflow also grants top-level write permissions, though no untrusted checkout, injection, or high-severity findings were reported.