markrogoyski/numverify-api-client-php

Release historycaution

The package has existed for nearly 8 years but has only six releases, with one release in the last 12 months. The recent release shows some activity, but the overall cadence is sparse.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the past three months. Although the release was recently published, the lack of recent commit activity limits evidence of ongoing maintenance.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not by itself evidence of unsafe code.

Workflow auditcaution

All three workflows were analyzed without failed files, dangerous triggers, untrusted checkouts, or script injection, and no workflow has top-level write permissions. However, all 16 analyzed action references are unpinned, leaving the build exposed to upstream action changes.