openagenda/api-sdk

Registry deprecationdanger

Packagist marks the package abandoned at package scope, with no replacement other than the same package name. This is a severe adoption risk because the registry itself signals that dependency use is not supported.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last three months. The repository was pushed around the latest release, but current activity is absent.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked repository is the package's maintained source.

Workflow auditcaution

All 4 analyzed action references are unpinned, which is a workflow supply-chain hygiene gap. The audit found no dangerous triggers or sinks, and the workflow uses read-only permissions, which partly compensates.