level23/druid-client

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the release was published recently, this is a meaningful maintenance-capacity concern.

Repo toolingcaution

Composer and Phing build tooling are present, but no security-scanning tools were detected. The missing scanning coverage is a modest repository-hygiene gap, not evidence of unfitness on its own.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it does not by itself indicate abandonment or unsafe code.

Workflow auditcaution

All workflows were analyzed successfully with no trigger/sink combinations or audit findings, and no workflow has top-level write permissions. However, all 3 action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.