kemo/beatport-api-client

Release historycaution

The package is 231 days old but has only one release, so there is not yet evidence of an established release cadence or sustained publishing activity.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Because the project is still relatively young, this is a maintenance concern but not proof of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, making vulnerability reporting and disclosure expectations less transparent.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 7 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.