mirafive/sdk-php

Release historycaution

This is the package's first release, published today, so there is no established release or maintenance track record yet.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tool was detected, leaving a modest security-process gap.

Security policycaution

No security policy was found in the repository, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

All five analyzed action references are unpinned, weakening build reproducibility. One workflow grants top-level write permissions, but there are no untrusted triggers, checkout issues, script injections, or auditor findings, so this remains a hygiene caution rather than a severe risk.