maksekeskus/php-shipping-sdk

Repo bus factorcaution

One contributor made all recent commits, creating a concentrated maintenance dependency; organization ownership provides some handoff capacity but does not remove the current concentration.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, with activity from one maintainer; this is current but thin evidence of sustained maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkout paths, but all 3 action references are unpinned, reducing build reproducibility and supply-chain control.