platformsh/client

Repo commit activitycaution

Only two commits were recorded in the last 3 months, but both involved active maintainers; this indicates light recent activity rather than a clear collapse.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations less clear for a client library.

Version stabilitycaution

Version 3.0.0-beta5 is a prerelease, which adds some adoption risk despite the stable major-version track and only 25% prerelease share among recent releases.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. Both action references are unpinned, which is a minor reproducibility and supply-chain hygiene weakness.