php-arsenal/salesforce-soap-client

Repo commit activitycaution

There were zero commits and zero active maintainers in the three months measured, which is a meaningful maintenance concern for a library that integrates with an external API.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving an avoidable gap in repository assurance.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action uses are unpinned and the workflow has no top-level permissions block. These are workflow hygiene weaknesses rather than evidence of active compromise.