ndiritu/sample-http-guzzle

Repo package mentiondanger

The repository name does not match the package and its README does not mention the package, so the source may not actually belong to this release.

Release historycaution

The package has 29 releases over roughly four years, but none in the last 12 months, indicating a substantial maintenance pause despite its earlier regular cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance.

Workflow auditcaution

All four workflows were analyzed, but all nine action references are unpinned, three workflows grant top-level write permissions, and a high-confidence bot-conditions finding concerns auto-merge logic. These are meaningful workflow hygiene and supply-chain risks even without an untrusted checkout or script-injection sink.