nomokonov/sber-sdk-php

Release historycaution

This is a young package with one release, published 105 days ago, so there is too little release history to demonstrate sustained maintenance. Its recent origin partly explains the limited history but does not remove the uncertainty.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. For a package only 105 days old, that is a meaningful sign that maintenance may already have stalled.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled. This is a maintenance and response gap, not a verdict about maliciousness.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.