livck/cloud-php

Release historycaution

This is the first release and the package is 0 days old, so there is no release history to demonstrate sustained maintenance; the repository is present and recently pushed, which partly offsets the concern.

Repo commit activitycaution

There were no commits from active maintainers in the previous three months, but the package and repository are both newly created, so this currently shows limited history rather than established abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency for reporting vulnerabilities in an SDK that handles API tokens.

Workflow auditcaution

The workflow was fully analyzed and uses read-only permissions with no detected dangerous sinks or audit findings, but both of its action references are unpinned, weakening build reproducibility and update safety.