nextsms/php-client

Release historydanger

The latest registry release was about five years ago, with no releases in the last 12 months. That substantially raises abandonment and compatibility risk despite three releases overall.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The repository is not archived, but this still indicates currently limited maintenance activity.

Workflow auditcaution

All 9 analyzed action references are unpinned, and one workflow has a high-confidence bot-conditions finding; one workflow also grants top-level write permissions. The pull_request_target trigger has no untrusted checkout or script-injection sink, limiting the severity.