proxyrequest/php-sdk

Repo bus factorcaution

All 16 recent commits came from one contributor, leaving maintenance highly concentrated; organization backing partly offsets handover risk but does not remove it.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This is weak supporting evidence for maturity, but popularity alone is not decisive for a young, actively maintained package.

Workflow auditcaution

The only workflow is fully analyzed, uses read-only permissions, and has no untrusted checkout or script-injection findings. However, all 6 action references are unpinned; the two cache-poisoning findings are low-confidence hygiene warnings and do not independently establish a severe risk.