origami-mp/origami-api-sdk

Package scaffoldingcaution

The package includes a README, while the absence of tests and a changelog in the published artifact is normal packaging practice. The repository also lacks tests and a changelog, but this is a minor transparency gap for a library.

Security policycaution

The repository has no published security policy. This is a transparency gap for a package handling API authentication and responses, although it does not by itself indicate abandonment.

Workflow auditcaution

All six analyzed action references are unpinned, weakening build reproducibility. The two reported cache-poisoning findings have low confidence and therefore remain hygiene concerns rather than severe evidence.