jools/solana-php-sdk

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package less than a year old, that is a meaningful maintenance concern, although the release history shows earlier activity.

Repo popularitycaution

The repository has zero stars, forks, and watchers, indicating little visible community adoption or outside review. Popularity is supporting evidence rather than a verdict, so this only modestly lowers confidence in project maturity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

The repository has no published security policy. This makes vulnerability reporting and response expectations less clear for a library that handles blockchain clients and transactions.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted-code sinks, but all five action references are unpinned. That leaves the build exposed to avoidable dependency drift.