padosoft/askmydocs-connector-freshdesk

Release historycaution

This package is brand new, with two releases published on the same day and no established release interval. That limits evidence of long-term maintenance maturity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. That is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully audited, uses read-only permissions, and has no dangerous findings, but both of its two action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.