logdash/php-sdk

Release historycaution

The package is about 15 months old but has had no releases in the last 12 months, which suggests maintenance may have slowed substantially.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The repository was pushed recently, so this indicates reduced activity rather than clear abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear for a networked SDK.

Workflow auditcaution

All 7 analyzed action references are unpinned, and a high-confidence medium-severity finding identifies an archived action. The workflows were fully analyzed and showed no untrusted checkout or script-injection paths, limiting the impact.