oyi77/metaapi-cloud-php-sdk

Release historycaution

This is a 287-day-old package with only one release, so there is little release history to demonstrate sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, leaving current maintenance capacity unproven.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, which weakens automated supply-chain hygiene.

Security policycaution

The repository has no published security policy, reducing transparency about how vulnerabilities are reported and handled.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings or untrusted checkouts, but all 3 of 3 action references are unpinned, weakening build reproducibility.