moneroo/moneroo-php

Release historycaution

This package has only one release, published over two years ago, with no releases in the last 12 months. That limits evidence of ongoing compatibility and maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This conflicts somewhat with the recent repository push but still leaves current development momentum uncertain.

Security policycaution

The repository has no security policy, which leaves vulnerability-reporting and response expectations undocumented.

Version stabilitycaution

Version 0.1.0 is an early major version, so API stability and maturity are less established than for a mature stable release.

Workflow auditcaution

All eight workflow action references are unpinned, and the audit found a high-confidence bot-condition issue in a workflow with top-level write permissions. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is a hygiene concern rather than a severe risk.