predictflow/sdk

Release historycaution

This is the first release, published within the last day, so there is no release history to demonstrate sustained maintenance. Its very recent publication makes abandonment unclear rather than established.

Repo commit activitycaution

No commits or active maintainers were observed in the last three months. Because the repository and release are only hours old, this is weak abandonment evidence but still leaves maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. That is a moderate transparency and maintenance gap, not evidence that the package is unsafe.

Version stabilitycaution

The v0.1.0 version is an early major release, so its API and behavior may change as the project matures. It is not marked as a prerelease, which provides some compensating stability.

Workflow auditcaution

The single workflow was fully analyzed with no injection, secret, or high-severity findings, but both of its action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.