mblsolutions/simfoni-php

Repo commit activitycaution

The repository had zero commits and zero active maintainers during the last three months. The recent release partly offsets this, but the lack of current development activity lowers maintenance confidence.

Repo popularitycaution

The repository has no stars and only three forks, indicating limited visible adoption. Popularity is supporting evidence rather than a verdict, so this is only a modest concern.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That leaves a transparency and maintenance-hygiene gap for a package handling authentication and API credentials.

Security policycaution

The repository has no security policy. For a package that handles authentication credentials and tokens, this weakens disclosure transparency, although it does not by itself show unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-confidence audit findings, but both action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a supply-chain hygiene weakness.