kerryjones/marketdataapp-sdk-php

Release historydanger

This is the package's only release, published about two years and two months ago, with no releases in the last 12 months; that is strong evidence of limited maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the abandonment concern from the release history.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear for a package intended to handle financial-data integrations.

Version stabilitycaution

The assessed version is still v0.1.0-alpha and every recent release is a prerelease, so the API and compatibility expectations remain uncertain.

Workflow auditcaution

The audit found a high-confidence bot-condition issue in the Dependabot auto-merge workflow, plus all seven action references are unpinned and two workflows grant top-level write access. No untrusted checkout or script-injection sink was found, which limits the severity.