marketsdk/php

Release historycaution

This is the first release, published less than 1 hour ago, so there is no release history to demonstrate sustained maintenance; its age also makes the absence of activity unsurprising.

Repo commit activitycaution

There were no commits or active maintainers during the last 3 months, but the package and repository were created less than 1 hour ago, so this is insufficient history rather than evidence of a collapsed project.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, injection findings, or excessive permissions, but all 4 action references are unpinned, leaving them exposed to upstream changes.