jsonseo/php-sdk

Release historycaution

Three releases were published within about one day, showing active initial publishing but providing almost no evidence of sustained maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, but the package and repository are only about one day old, so this is mainly a lack of long-term evidence rather than proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, which makes vulnerability reporting and maintenance expectations less clear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility and action provenance.