messagebird/pushprom-php-client

Release historycaution

The package has only 3 releases since August 2016, with no release in nearly five years and none in the last 12 months. This is strong evidence of inactivity, although the package is stable and not deprecated.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. The repository remains available and unarchived, which reduces but does not remove abandonment concern.

Workflow auditcaution

All 7 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image. The workflow has no untrusted checkout or script-injection findings, so this is a CI hygiene concern rather than a severe standalone risk.