php-twinfield/twinfield

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A release was published during that period, but the absence of commit activity still indicates limited ongoing maintenance.

Repo issue activitycaution

There are 12 open issues and three open pull requests, but no issues or pull requests were created or merged in the last month. This suggests limited current interaction, though it is not conclusive abandonment evidence.

Repo toolingcaution

Composer is used for the build, but no security scanning tool is reported. For a maintained integration library, that is a modest transparency and hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy. This weakens the documented process for reporting and handling vulnerabilities, although it does not by itself show that the code is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write permissions. However, both of its two action references are unpinned, leaving the build exposed to action ref changes.