playbloom/guzzle-bundle

Maintainerscaution

Only one registry publisher is listed, and the project is backed by an individual account rather than an organization; this leaves limited visible maintenance redundancy.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, indicating currently inactive maintenance despite the recent release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a hygiene gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three analyzed action references are unpinned, which weakens build reproducibility and leaves workflow dependencies exposed to upstream changes. The audit otherwise found no dangerous triggers, sinks, or security findings.